You should take a look at this.
It is spreading fast!
http://blog.sucuri.net/2015/03/pseudo-darkleech-server-root-infection.html -- Bruno Accioly
Thanks for the great work Eli. I am using your plugin in combination with BPS and my site is now malware free since the past two months... I have made a small donation to the best of my capabilities. Will come back and do more... -- Don Sony
Just donated. Keep up the great work. :) -- Tom Thayer