[Plugin: WP Security Scan] Not detecting a hack

I am having a problem with my site when someone finds it from google. When simply searching for my site in Google someone who clicks on the sub link (the main link is above and then showing another posted item below it), when they click on it they are taken to a malware website.

If the user clicks on it a second time they are taken to the correct page. It does not matter what sub link they click on it will always direct them to same malware site.

I was obviously hacked or had some sort of SQL injection done but I can’t find it. I have used your plugin and it does not show me in any way that I can tell where the exploit is located. Obviously it is not your problem but I am wondering if there are other ways to detect the hacks?

I really need to find where this is at and remove it but I am so far at a complete loss. I have spent full days browseing my SQL databases and cant find it. For those that say “delete and start-over” I am not willing to do that at this point.

Please HELP!