You should take a look at this.
It is spreading fast!
http://blog.sucuri.net/2015/03/pseudo-darkleech-server-root-infection.html -- Bruno Accioly
Glad to see community is active, product is supported and updated. -- Richard Roy
Truly extraordinary service and a great tool that fixed hacked scripts rather than just deleting them as other tools wanted to do (which would have broken my site).