These are the following online tools I would suggest for malware scanning, bro:
This tool won't scan individual files or folders, but it'll scan your entire website and updates you if there are any malware related scripts. I used this to detect some weird scripts which were installed on my client's websites, which was caused by a pirated nulled WordPress plugin.
This tool doesn't work for malware/virus removal, but it'll help you to detect them. Later I use this for cleanup purposes and secure the website further. You can upload your theme/template and plugin files here.
You can also use your desktop Antivirus or Internet Security software/app to scan your local folders for any malicious code. There are plenty of professional services for this as well, but use them during your worst case scenario.
HELPFUL: Where can I Download Premium but not Nulled WordPress Themes/Plugins?