You are probably seeing warnings stored in a cache.
Go to the settings page, there is a panel called “Data Storage” with a list of files that the plugin uses to store the settings, security logs and cache. Locate one called “sucuri-sitecheck.php” and reset it. After this, the plugin will be forced to execute a fresh scan and — if the malicious code was properly removed — the warnings will disappear.
You can also check this website [1]. Input your domain name, wait for the execution of the malware scan. If the cache is still in place, the results will appear in less than 3 seconds, if this happens you can click the “Force a Re-scan” link to force the cache expiration. If the scan takes more than +20 seconds it means the cache was already flushed and you will get a fresh scan.
[1] https://sitecheck.sucuri.net
thanks for your reply.
It worked as I clicked “Force a Rescan” – Thanks a lot for that.
Cheers.