Is my work website infected or false positive?

[EmoHobo]

tm.menard-inc.com

Please let me know.  I am worried.

[Secondmineboy]

Some Incapsula resources are getting blocked as javascript malware.

Check the Incapsula settings: http://prntscr.com/bqqzt9

https://securityheaders.io/?q=tm.menard-inc.com&followRedirects=on
https://securityheaders.io/?q=https%3A%2F%2Ftm.menard-inc.com%2F

How to fix the headers: https://scotthelme.co.uk/hardening-your-http-response-headers/#server

[EmoHobo]

My avast blocked it.  Am I safe?

[Secondmineboy]

My avast blocked it.  Am I safe?

Its blocked so youre safe but Incapsula (Good choice BTW) is causing errors and something from Incapsula is getting blocked by Avast.

09.07.2016 14:56:48   http://tm.menard-inc.com/_Incapsula_Resource?SWJIYLWA=2977d8d74f63d7f8fedbea018b7a1d05&ns=1|>{gzip} [L] JS:Downloader-DFD [Trj] (0)
09.07.2016 14:56:53   https://tm.menard-inc.com/_Incapsula_Resource?SWJIYLWA=2977d8d74f63d7f8fedbea018b7a1d05&ns=5|>{gzip} [L] JS:Downloader-DFD [Trj] (0)

[EmoHobo]

I am going to report it to corporate.  Hope they take it seriously.

[Secondmineboy]

I am going to report it to corporate.  Hope they take it seriously.

I hope so too

[REDACTED]

I'm getting it on moneysavingexpert.com and even Incapsula's website too.

Virustotal for moneysavingexpert.com threat url: https://www.virustotal.com/en/url/a2f60985d973eaa312715ac5ca87344555875dac2a88f8ba6539775f1ab3d996/analysis/1468071419
And the JS: https://www.virustotal.com/en/file/00299aa11962fb6c8bf22ab85aafccadde4c5d9e1a3ed2a236d1055a1da83986/analysis/1468070297

[EmoHobo]

I am going to report it to corporate.  Hope they take it seriously.

I hope so too

This job already wrecks my life.  Dont need it to wreck my home computer also.

[Secondmineboy]

Looks like it may be a false positive on any site using Incapsulas service or certain files.

[EmoHobo]

I hope it was just a false positive since the alert seems to be gone now.

[Secondmineboy]

I hope it was just a false positive since the alert seems to be gone now.

May have been cause i got that alert on random other sites as well constantly.

[EmoHobo]

We must get an official word or not, I just restarted and don't notice anything horribly wrong.

[Secondmineboy]

We must get an official word or not, I just restarted and don't notice anything horribly wrong.

HanzaZ is notified, keep an eye out on the topic

[EmoHobo]

We must get an official word or not, I just restarted and don't notice anything horribly wrong.

HanzaZ is notified, keep an eye out on the topic

I'm like suddenly becoming very nervous, I have no idea why.

[HonzaZ]

  No need to be nervous
This detection (JS:Downloader-DFD) was indeed a false positive and has been fixed yesterday evening. Sorry for the false popups!