Frank Goossens on "[Plugin: Autoptimize] Malware"

1. never exclude any directory from being scanned, better to have false positives that prove wrong then false negatives (which one would not know about).

2. json2.min.js might point tot soaksoak, which currently is targetting old versions of revslider, see http://blog.sucuri.net/2014/12/soaksoak-new-wave-evolution-attacks.html for more info.

stay strong & updated in 2015 ;-)

frank