Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
one_co_il
New Contributor

AV report Internet Radio

why the AV report online radio? (link:http://www.fm1.co.il/glgltz.html)

is there any way to whitelist it?

here is the AV massage:

------------

Message meets Alert condition Virus/Worm detected: JS/Agent.NMR!tr Protocol: HTTP Source IP: x.x.x.x Destination IP: 80.179.18.21 Email Address From:  Email Address To:  VIRUS REFERENCE URL: http://www.fortinet.com/ve?vn=JS%2FAgent.NMR%21tr date=2018-11-08 time=15:46:11 devname=FG100D3G14828008 devid=FG100D3G14828008 logid=0211008192type=utm subtype=virus eventtype=infected level=warning vd=root msg="File is infected." action=blocked service="HTTP" sessionid=279526450 srcip=192.168.0.95 dstip=80.179.18.21 srcport=54442 dstport=80 srcintf="lan" dstintf="wan1" policyid=1 proto=6 direction=incoming filename="glgltz.html" quarskip=No-skip virus="JS/Agent.NMR!tr" dtype="Virus" ref="http://www.fortinet.com/ve?vn=JS%2FAgent.NMR%21tr" virusid=4294967295 url="http://www.fm1.co.il/glgltz.html" profile="AV Default" user="" agent="Chrome/70.0.3538.77" analyticssubmit=false crscore=50 crlevel=critical

 

0 REPLIES 0
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors