You should take a look at this.
It is spreading fast!
http://blog.sucuri.net/2015/03/pseudo-darkleech-server-root-infection.html -- Bruno Accioly
I have just donated, your wonderful plugin found problems missed by Wordfence and now my site is super clean, many thanks -- Jane Akshar
A great plugin with incredible support. If you're dealing with malware and are considering this plugin, it's absolutely worth it.
Thanks, Eli! -- Sarah Meier