Hi Eli!
Maybe you can help me find a solution for my problem: my website was infected with MW:JS:GEN2?rogueads.unwanted_ads.1 malware. I was using diferent security plugins trying to clean infection but no luck. I removed non standard core files, malicious code from theme function.php files, etc. Symptoms (random popup ads on menu items clicks) still existed.
So i have instaled wordpress and plugins from scratches, only imported database copy.
Now it looks like symptoms are gone but Sucuri scanner continously shows that website is infected: https://sitecheck.sucuri.net/results/matpol.no
I have installed your plugin but scanner says it’s clean – no threats, no infected files.
Additionally offline files search for infection scripts and phrases gives no result.
Du you have experience with similiar issue or maybe you know what is going on? 
Thank you in Advance!