You should take a look at this.
It is spreading fast!
http://blog.sucuri.net/2015/03/pseudo-darkleech-server-root-infection.html -- Bruno Accioly
Thank you so much! I can't express how thankful and grateful I am. This plugin saved me so much time and a headache! Please keep on developing and I'll keep on supporting! wish you all the best!!! -- Darko Novak