You should take a look at this.
It is spreading fast!
http://blog.sucuri.net/2015/03/pseudo-darkleech-server-root-infection.html -- Bruno Accioly
Eli,
You have been a great help and I appreciate your plug-in and your accessibility. Thanks for your prompt responses. You were worth a double donation for sure!
I am constantly amazed at the level of customer service that Eli provides for his plug-in. I have used his product on (3) separate wordpress sites, and cannot recommend it enough. Many thanks, Eli, for always being there to shrink my headaches away! Just made a donation - please keep it up! -- Steven H