I thought the FMHY lists showed sites that hosted themselves, not just peer posted files. If this was happening regularly with such a site, I’d eject it, too.
Also, the information provided sates plainly that this is far from the first time, but their lack of response or efforts to stop malware is what triggered the removal from the list. FileCR should plainly not be on the trusted list.