JS/Redir.NV!tr

Analysis

JS/Redir.NV!tr is the detection for JavaScript codes that are embedded in an infected web page. These codes intend to redirect users to malicious web sites, such as the following:

• http://livesport.rozb{Removed}.com
• http://www.patat{Removed}.com/xmlrpc.php
• http://www.ght{Removed}.org
• http://www.hanrat{Removed}.nl

Recommended Action

• Make sure that your FortiGate/FortiClient system is using the latest AV database.
• Quarantine/delete files that are detected and replace infected files with clean backup copies.