You should take a look at this.
It is spreading fast!
http://blog.sucuri.net/2015/03/pseudo-darkleech-server-root-infection.html -- Bruno Accioly
Hi There Eli,
Thankyou thankyou thankyou for this plugin I donatede because 1 of my sites had 22 backdoors on it :o I had not a clue it had that many, all my sites were hacked thanks for this plugin and the genius of you and your team :) -- Eugene
Thank you for a great plugin. The depth of your technical expertise puts me and my clients at ease. Great work. Please keep it up. -- Norm Attarmigiroglu