Eli on "[Plugin: Anti-Malware Security and Brute-Force Firewall] Potential threats"

If Wordfence says "Post contains a suspcted malware URL" that means that the malicious URL is not in the PHP code, it is in your post content in the database. You should remove it using the "text" tab on the edit post screen in your wp-admin.