I thought I already covered this one for you. If someone's found to have a website that is intentionally malicious, taking away the malicious part doesn't guarantee you will be whitelisted, it'll take a while...
OK, I didn't pick that bit up. I would still argue that a mining program that prompts the user to ask their permission to run isn't malicious.
It was probably more that it was quite an intensive program that was being run. I'm not sure but could anyone else confirm if programs like Bitcoin core and nicehash also get blocked in a similar way?