Script:SNH-gen

Viruses and worms
1

I got this thing randomly as I’m just playing a game on my computer, and Avast shows this.

image
image583×754 47.2 KB

Avast usually gives me a warning when I open microsoft edge by pressing links from the windows search menu, but this time I didn’t even open edge. I deleted my extensions from Microsoft edge, hoping that could solve the problem, but I’m wondering, what happened?

2

Presumably you aren’t actually trying to connect to this domain ?
See this google search I did on the domain name.

That suggests it is a malicious page/site.

Try clearing your browser cache and cookies, including 3rd party cookies and restart your browser. - If that resolves it you should be good to go.

  • If it doesn’t try running your browser with add-ons disabled (I know you tried that).
  • If that resolves it, have you added or updated any add-ons ?
  • If so try disabling that add-on - and restart and try again.
    If still not resolved and you are using Chrome based browser
  • try this suggestion by Avast Team member ‘lukor’
  • What about page notifications? Here: chrome://settings/content/notifications ? Do you have all cleared?

Microsoft Edge uses the Chromium language (based on Google chrome), so this might also be applicable to Edge.

3

How do I know if it’s resolved though? There’s not a specific action I did to trigger it, it just happened randomly.

4

Therein lies the problem. Fault finding isn’t a simple task, you have to work your way through the testing, until hopefully it stops.

5

My question is how do I know if it stops? What do I test? It could never give a warning again but still be there. I want to know what tried to hack me, what program, and how I can find it and remove it.

6

If it is still there, I would expect that you would continue to get the same alerts that you have in the past.

7

Well I haven’t got an alert after this, but I’ll come back and tell you if it happens again.

8

These SNH:Script [Dropper] related files should be deleted. Unfortunately, Antivirus often only partially succeeds in removing the remains of SNH:Script [Dropper].

A scan with MBAM could find the rest of such files.

polonus