AVG Support Community
Share tips and solutions on AVG Products
Community topics
AllAVG Gurus
These community experts are here to help
-
Alan Binch
-
Borislav Angelov
-
Vladimir Bartl
-
Subhadeep Kanungo
-
Miloslav Serba
Threat: Script:SNH-gen [Trj]
AVG appears to be confusing a common Wordpress plugin script with a trojan threat.
First reported on..
https://www.saintsandsinnersball.com.au/next-ball-friday-16-july-2021/
AVG is now blocking download of the zip file for the most popular contact form for Wordpress.. Contact Form 7
https://wordpress.org/plugins/contact-form-7/
Please advise if this is a false positive?
Hello Brian,
We apologize for the inconvenience.
To further look into this & help you, we require the screenshot of the threat message you received from AVG.
You can post the screenshot here in your topic. Click on Answer & then click on the Image [mountain symbol] & follow the instructions.
Note: Kindly click on "See Details" on the threat pop-up and then share us the screenshot.
Thanks in advance.
Thank you for sharing the screenshot, Brian.
Initially, could you let us know if you're getting this threat pop-up when you're accessing the detected website from Google Chrome browser only or do you get it when accessing the detected website from other web browsers as well?
How often does the threat pop-up appear?
Do you think that the detected website is safe to access?
Awaiting your response.
Google Chrome (as the screenshot shows)
I don't have time to try other browsers.
I received the same warning when attempting to download the zip file containing the plugin.
Thank you for writing back to us, Brian.
In this case, we request you to reset your Google Chrome browser to it's default settings, restart your computer once & check if the issue persists.
Refer to this article to reset your Google Chrome browser.
Keep us udpated.
Midhun, how do you account for AVG reporting the same threat when you attempt to download the plugin.
Tyr it yourself:
https://wordpress.org/plugins/contact-form-7/
We understand your concern, Brian.
We've tried but we're unable to access the link you've shared. Hence, we request you to share us the screenshot of the threat message you receive when you try to access the second website you've shared.
Thank you for understanding.
We are sorry to know this.
Due to security policy, we are unable to access the link that you shared.
Regarding the threat message you received, we request you to reset your Google Chrome browser & check if the issue still persists.
Refer to the below article to reset your Google Chrome browser:
https://support.avg.com/SupportArticleView?urlname=AVG-Reset-browser
Please keep us updated.
Thank you.
It's commical that AVG security policies don't trust it's own products. Why else would a policy prevent its support from visiting websites?
Downloading a file is not browser related. AVG monitors file downloads.
Google "Threat: Script:SNH-gen [Trj]" and you'll see hundreds of false/positive experiences caused by AVG.
Oops, sorry your security policy won't allow you to access Google.
I recommend you to submit the false positive request using the below link. Our developers will check and get back to you soon.
https://www.avg.com/en-us/false-positive-file-form
If you confirm that the file is safe, you can add it to the exception list in AVG Internet Security/ AVG AntiVirus FREE after uploading the file.
Please click this article for step-by-step instructions to add exceptions in AVG Internet Security/ AVG AntiVirus FREE.
I pay for software to work.
AVG customers should not be doing AVG's job.. simple!