Author Topic: Notification (Script: SHN-gen [Trj] on Prodflying.com) every time I perform a Go  (Read 881 times)

0 Members and 1 Guest are viewing this topic.

Offline shirleysmith

  • Newbie
  • *
  • Posts: 1
I encounter a notification (Script: SHN-gen [Trj] on Prodflying.com) every time I perform a Google search. I have already conducted basic searches to address the issue and scanned for viruses and trojans, but I couldn't find anything. Additionally, I attempted to reset Chrome, but it didn't detect any problems.

This problem arose after I visited a WordPress site, although I'm unsure which one specifically. Interestingly, I noticed that another person had a similar issue with their WordPress site, so I wondered if there might be a connection.

I have attached a screenshot for reference, and any assistance would be greatly appreciated.
geometry dash subzero
« Last Edit: January 18, 2024, 01:52:30 AM by shirleysmith »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37614
  • Not a avast user
Try clear Your browser history

In all major Internet browsers (e.g., Chrome, Edge, Firefox, IE, Opera), pressing Ctrl + Shift + Delete opens the Clear browsing data window to quickly clear private data and history

Does it still happen?
- If so try starting your browser with apps disabled.

Does it still happen?
If not, one of your browser add-ons would appear to be connecting to this site.
Now it is a bit of a pain, disabling one app at a time to find it.
Start with any app recently added and or apps recently updated.



Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33931
  • malware fighter
This is what brings about the confusion and the issue was explained here:
https://support.avg.com/answers?id=9065p000000Q3arAAC

So this has been an issue that somewhat longer resided as a generic detection.

This malicious stealth operating script (the real stealth McCoy) also is being detected as:

Script:SNH-gen [Trj] is also detected as:
BitDefender   Trojan.Agent.FXCW
ESET-NOD32   VBS/Kryptik.PN
F-Secure   Malware.VBS/Kryptik.hwhzq
Fortinet   VBS/Kryptik.PN!tr
Ikarus   Trojan-Downloader.VBS.Agent
McAfee   VBS/Trojan.c
Sophos   Troj/Mdrop-JEV
Symantec   Trojan.Gen.MBT
TrendMicro   Trojan.VBS.MISPADU.THIADBO

Using Adware Cleaner with in settings set to "Reset Chrome Policies" may remove malicious browser policies of Prodliflying dot com.
Cleanse and then click Quarantine. Click Continue to start the removal process

polonus
« Last Edit: January 18, 2024, 10:30:38 AM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!