Update, we've hired a specialist to look at our site and he said the following:
I've checked your site, but I am not detecting any virus, trojan or anything by my software. I also was unable to find usual code that they use to stay on websites, like on other client sites that were infected.
We're also now having a 2nd specialist look into this for us.