You should take a look at this.
It is spreading fast!
http://blog.sucuri.net/2015/03/pseudo-darkleech-server-root-infection.html -- Bruno Accioly
Thanks so much for this plugin, I was finally able to donate $29+. After it saved the day on a website I voluntarily maintain, it helped me prevent potential problems on others. It has been the most practical, affordable solution for an insidious problem. Keep up the great work! -- Lois
I just donated! Thank you so much for your wonderful plugin. I used to have so much trouble with my website and now I never have to worry. I appreciate all the work you do! -- Amie