This looks like the server was compromised and the hacker removed suspicious code, so that google removes the warning. Then later he puts it there again, until google warnes again... be cautious...