You should take a look at this.
It is spreading fast!
http://blog.sucuri.net/2015/03/pseudo-darkleech-server-root-infection.html -- Bruno Accioly
Thank you Eli for your wonderful work! You and your software are truly a life saver!!!
Please continue your awesome work and mission, it is so much appreciated by all who are and have benefited from your dedication and passion to help others. : God Bless. -- Jeff Rafael