Script Snh-gen trj

Hello!
When I open Microsoft office file from desktop, Avast shows alert like in attachment.
When I open same file from any other place nothing happens.
Maintained full check - no viruses.
It started yesterday.

Hello Парфенов,

Consider this malcode detection also in the light of this warning:
Trojan/Win32.Wacatac (MS) a.k.a. Script Snh-gen trj (avast) is being abused in spyware attacks by APT groups,
read CISA’s TLP White Report: https://us-cert.cisa.gov/ncas/analysis-reports/ar20-198a on SOREFANG attacks :smiley:
against SSL VPN servers. (Report was issued yesterday - 16-7-2020)

polonus (volunteer 3rd party cold recon website security-analyst and website error-hunter)