I wonder if NSW do a suprise scan of the site or if they scan it with a regular schedule. If it is a regular schedule, the malware writer can hide or take off the malware when Norton scans the site and put it back up after the scan. Also is there any way to evade NSW malware scans?