You should take a look at this.
It is spreading fast!
http://blog.sucuri.net/2015/03/pseudo-darkleech-server-root-infection.html -- Bruno Accioly
Hey Eli,
I am very grateful to you for this PlugIN, so I do not have to program it.
I know how complex it is and how much time you spend with it.
Leave it please free of charge and let the people donate, I have also just done that.
Just because it's worth it to me, really, THANK YOU!