You should take a look at this.
It is spreading fast!
http://blog.sucuri.net/2015/03/pseudo-darkleech-server-root-infection.html -- Bruno Accioly
Eli is a living legend, this plugin is fantastic and the service from Eli that goes with it puts the richest corporate support in the world to absolute shame. -- Charlie