You should take a look at this.
It is spreading fast!
http://blog.sucuri.net/2015/03/pseudo-darkleech-server-root-infection.html -- Bruno Accioly
Made my first donation but I won't stop here. Your plugin has been such a great help and I am going to continue to donate from time to time and do all I can to support your great work! Thank you so much Eli! -- Szebastian Onne
My site was infected and I used your plugin to effectively scan and removed the affected files. Thanks a lot for the good effort to share your work with the rest of the world! -- Zhihan