Hi,
Sorry to hear about the troubles you are having.
Shield will alert you when files get modified or new files are added (not part of your original core, plugin, theme installation files) and can keep repairing modified files automatically for you to ensure that it doesn’t contain any malicious code any longer.
We go into the all details in the Shield’s scans guide here.
(Malware, and Vulnerabilities scans are available for premium members only)
Please note that, due to the conditions set on the www.ads-software.com forums, we can’t discuss premium options here. But you can get quick help and advice from the Shield community by joining our Facebook group here. Or, contact us directly here.
So Shield can help but to stop malware from recurring, you’ll need to find the source of the problem. Malicious code can get in even on the server-side. Or, maybe this malvertising is in your theme files, e.g., ‘footer.php’ (just guessing).
Security, unfortunately, is an ongoing process and requires us to audit our sites regularly and to pay close attention to alerts sent from Shield. Shield will identify the issues as they arise and provide the mechanism to lock down a site and keep it as secure as possible, but often it can require more in-depth investigation to resolve the issue.
If you’ve removed this malware from your WordPress site but it keeps reappearing, it indicates that there might be an underlying issue or vulnerability that needs to be addressed. You’ll need to identify the source of reinfection and how this malware gets in.
Dealing with recurring infections can be challenging but it’s not impossible to do so. Here are some steps we highly recommend you to take to address the issue:
Security Audit: https://getshieldsecurity.com/blog/run-wordpress-security-audit/
27 Vulnerabilities: https://getshieldsecurity.com/blog/wordpress-security-vulnerabilities/
I understand there’s quite a bit to go through, but please follow the guides above one step at a time.
Jelena
