You should take a look at this.
It is spreading fast!
http://blog.sucuri.net/2015/03/pseudo-darkleech-server-root-infection.html -- Bruno Accioly
I found it fantastic!!! It cleaned completely my site, from malicious files and database injection. I'm delighted that I was able to contribute $ 29 so you can keep improving. I'm sure I will continue to contribute. Thanks for your excellent work. -- Carlos Garreta
Thank you so much for your work!! Your scan found and fixed all of my problems. I proudly made a donation to support your work.