Gets a lot more malware than other plugins, but misses a lot too

I add new threats to my definitions all the time. If there is anything that it is missing please it too my so I can add it to my definition updates.

You can’t fully depend on any plugin to prevent or remove all malware.

The back-door or some other exploitable vulnerability may not be on the infected site at all. On many shared hosting servers the root infection will spread from one compromised site on the server to all the other sites on the same server. There will never be anything that any plugin can do to protect you against that kind of attack. What you need then is Super Secure Hosting 😉