You should take a look at this.
It is spreading fast!
http://blog.sucuri.net/2015/03/pseudo-darkleech-server-root-infection.html -- Bruno Accioly
Been using this on most sites I run for a number of years now. Have pretty tight security with iThemes Security Pro and Wordfence Pro. On the odd occasion something slips through and gotmls cleans up the mess. Ran into major problems today on a new site for a client. After panic stations gotmls sorted the problem out.
A must have piece of kit for every website I build.
Five stars+ -- Colin James
I have been using this plugin for years and it continues to be a time saver and huge help to my business and clients! I have peace of mind that this plugin will find and quarantine any malicious code, helping my clients' sites stay clean. Thank you for all of your hard work! -- Jessica Reilley