You should take a look at this.
It is spreading fast!
http://blog.sucuri.net/2015/03/pseudo-darkleech-server-root-infection.html -- Bruno Accioly
Lifesaver! Thanks so much for providing this service. I just sent over a donation. Your product cleaned off the issues that I was having! Huge thanks. -- Chris
Hello,
What a fantastic job you have done. I appreciate you created this great script. It works like charme, A superHero against the bad guys:). Good work. -- Avnish Negi