Did you download the latest definition updates?
Potential Threats are usually not malicious, especially .js files. The Automatic Fix button is for Known Threats (in red).
If my plugin does not find and fix the threat that is causing these ads to show up on your site then I can look for the malicious code myself. Just email me a WP Admin login for your site and I’ll take a look.