You should take a look at this.
It is spreading fast!
http://blog.sucuri.net/2015/03/pseudo-darkleech-server-root-infection.html -- Bruno Accioly
Eli
Following my policy of making another donation each time the plugin detects and clears some malware, I have just made another donation.
I hope other users adopt the same policy of supporting this fantastic plugin - surely each time it finds and clears up an infection is worth at least at least an hours pay? -- Will Chapman