ANSWERED False positive, hyperhost.name sites

[marksnake]

Hi Support team,

yesterday we discovered that the antivirus Malwarebytes premium is started to block our sites on  vps26256nl.hyperhost.name : dupcom.net, nestola.eu, dupcom.it and other 10 sites

we have check all code but every  antivirus  report cleaned, the IP is not in any spam databases and there is no trojan. 

Could you please resolve this issue ASAP? We are blocked on more business 

 

thanks

 

 

Malwarebytes
www.malwarebytes.com

-Dettagli log-
Data evento di protezione: 23/01/20
Ora evento di protezione: 04:49
File di log: 4dd54206-3d93-11ea-8e39-f0def160621b.json

-Informazioni software-
Versione: 4.0.4.49
Versione componenti: 1.0.793
Aggiorna versione pacchetto: 1.0.0
Licenza: Trial

-Informazioni sistema-
SO: Windows 10 (Build 18362.592)
CPU: x64
File system: NTFS
Utente: System

-Dettagli siti web bloccati-
Sito web nocivo: 1
, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe, Bloccato, -1, -1, 0.0.0

-Dati sito web-
Categoria: Trojan
Dominio: vps26256nl.hyperhost.name
Indirizzo IP: 91.235.129.157
Porta: 80
Tipo: In uscita
File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(end)

[thisisu]

Hi,

The IP address will be reviewed

[thisisu]

Hi,

The block will be removed in the next update. It was originally blocked for malware: https://www.virustotal.com/gui/url/13eb3e066b63b9b8d92653741c05435dff39274f6bee8e9b7c83ecddec6a4cc7/detection

But it no longer exists,

Regards

[marksnake]

This is most likely a mistake.
  http://91.235.129.157/
sent to a specific directory and this directory has not been changed for several months
in access logs we see that all requests for
http://91.235.129.157/loader.exe
received a response 404 - file not found

[marksnake]

please can you tell me when the next update will be? 

[Dashke]

Can you please check if you are getting the notification now?

[marksnake]

now its ok!
thanks

[Dashke]

We are always at your service.