http://arstechnica.com/security/2015/04/30/spam-blasting-malware-infects-thousands-of-linux-and-freebsd-servers/
I saw a post on another list from someone whose webserver got it. He says the files deleted themselves and the spambot process was running in memory.
