You should take a look at this.
It is spreading fast!
http://blog.sucuri.net/2015/03/pseudo-darkleech-server-root-infection.html -- Bruno Accioly
I just donated! Thank you so much for your wonderful plugin. I used to have so much trouble with my website and now I never have to worry. I appreciate all the work you do! -- Amie