Company website is blocked

[Josh979]

Can you remove our website from being blocked by malwarebytes? It does not have malware...

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 5/21/18
Protection Event Time: 9:35 AM
Log File: 09539282-5d15-11e8-b5ac-4ccc6a27e676.json
Administrator: Yes

-Software Information-
Version: 3.4.5.2467
Components Version: 1.0.342
Update Package Version: 1.0.5192
License: Premium

-System Information-
OS: Windows 10 (Build 17134.48)
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, , Blocked, [-1], [-1],0.0.0

-Website Data-
Category: Malware
Domain: avwebdesigns.com
IP Address: 160.153.62.168
Port: [53321]
Type: Outbound
File: C:\Program Files (x86)\Firefox Developer Edition\firefox.exe

 

(end)

[Zynthesist]

Hello,

This is an IP block for Trojan.Lokibot

[Josh979]

Thanks for the response. We recently moved our website to a new hosting account (with a new IP address) within the last few months. Is it possible that this IP block was put in place before our site moved to it? And if so, can we request a current scan be run to clear the block from our site?

[Zynthesist]

The IP is a shared IP. 

[Josh979]

Can you give me more information on what specific website on that IP is being flagged for the trojan? I can pass this info on to my hosting provider and have them move or disable the source malicious website from the shared IP.

Edited May 21, 2018 by Josh979

[Zynthesist]

bhthai.com/css/nass/Panel/five/fre.php)

 

[Zynthesist]

IP block is being removed.