Can you add a few more script injectors to your definitions?
I have these two in my site:
Website Malware MW:JS:GEN2?web.js.redirect.window_location.008
tia,
Durrant