You should take a look at this.
It is spreading fast!
http://blog.sucuri.net/2015/03/pseudo-darkleech-server-root-infection.html -- Bruno Accioly
WOW!! Absolutely amazing work!! I struggled for days with a loose malware attack on a godaddy.com server. All my Wordpress sites were infected. I would clean them, but miss one file.... next day all were corrupted again. Your wonderful work cleaned over 7000 instances in minutes. My site remains clean and I am thankful. Donations when I get some cash in my account. THANKS!!! -- Mark
Thank you for your great work, has created a very good thing. I'll be supporting your work on sites that build. Greetings from Honduras. -- Walter Almendarez