My antivirus software detected malware on my Weebly site

[spartridge]

My antivirus software blocked access to my Weebly store due to the presence of "script snh-gen", a trojan horse virus. Currently I can't reach the site. 

Help, what now?

[TheRealChipA]

@spartridge I just saw your post. While I’m not a Square/Weebly employee, I found it concerning enough that I decided to use a few connections I have to pass it up the food chain, as it were.  Let me see where this goes, and either I or a more competent and helpful Square employee will get back with you.  My concern is that a virus on your website might equal a virus on many Weebly websites.  That would not be good at all!  Thanks for bringing this up as quickly as you did!  It might be nothing.  It might be something.  Better safe than sorry.

Hold tight.

[spartridge]

Thanks for taking this seriously and helping out. 

[TheRealChipA · Accepted solution]

@spartridge Good morning!  I received a reply from a few folks on the Square team.  Here’s a summary:

“Google is the friend here - that's a false positive that the virus software has to sort. Nothing Square can do at all about it unfortunately.”

My research had indicated that might be the case, but I know enough about the things I don’t know enough about to know that I needed to check.  This particular virus is imitated quite a bit in the wild, it seems, and fools even the virus checkers.  SO….  If you want to, give me your URL so that I can try to access it.  If I can, then your next courses of action will be to:

1. Contact the maker of your AV app/software to see if they have a solution for you.
2. Contact Square directly here

I wish you well.  Feel free to ask any other questions and I’ll try to answer.  But I’m about at the self-admitted end of my knowledge or advice here.

[spartridge]

Thanks, I did see a similar case also diagnosed as a false positive - maybe it’s that. I have emailed square support. Haven’t contacted avast, my anti virus program. 

thanks for helping with this. My square / weekly site is jevaartprints.square.site 

[TheRealChipA]

@spartridge You’re welcome.  I can access your site fine, so that makes me suspect that Square won’t be able to help you at all.  This is almost certainly an issue with avast.   There might be a new virus fingerprint database you can download, or they might have a way to mark this as a false positive so that they can research it.   I hope you get it resolved quickly.

[carolswhimsical]

Hi there, just out of curiosity did you ever get a final answer on why this was happening?  Did it end up being a false positive on Avast's end?  The same thing is happening to me where Avast is blocking the site and I am wondering how to fix it.  Do I need to contact Avast or Square to get this sorted out?  Any assistance would be much appreciated. Thanks!

[spartridge]

It was a false positive - not sure if it was Avast or Chrome that was the issue. It resolved later that day. 

[spartridge]

Hi, 

It was a false positive. Not sure if it was because of Avast or Chrome or both. It went away later that day. 

[mysticcoffee]

One of my customers also reported the same script on my Weebly site today.