Is my work website infected or false positive?

Avast Free Antivirus / Premium Security
1

tm.menard-inc.com

Please let me know. I am worried.

2

Some Incapsula resources are getting blocked as javascript malware.

Check the Incapsula settings: http://prntscr.com/bqqzt9

https://securityheaders.io/?q=tm.menard-inc.com&followRedirects=on
https://securityheaders.io/?q=https%3A%2F%2Ftm.menard-inc.com%2F

How to fix the headers: https://scotthelme.co.uk/hardening-your-http-response-headers/#server

3

My avast blocked it. Am I safe?

4

Its blocked so youre safe but Incapsula (Good choice BTW) is causing errors and something from Incapsula is getting blocked by Avast.

09.07.2016 14:56:48 http://tm.menard-inc.com/_Incapsula_Resource?SWJIYLWA=2977d8d74f63d7f8fedbea018b7a1d05&ns=1|>{gzip} [L] JS:Downloader-DFD [Trj] (0)
09.07.2016 14:56:53 https://tm.menard-inc.com/_Incapsula_Resource?SWJIYLWA=2977d8d74f63d7f8fedbea018b7a1d05&ns=5|>{gzip} [L] JS:Downloader-DFD [Trj] (0)

5

I am going to report it to corporate. Hope they take it seriously.

6

I hope so too :slight_smile:

7

I’m getting it on moneysavingexpert.com and even Incapsula’s website too.

Virustotal for moneysavingexpert.com threat url: https://www.virustotal.com/en/url/a2f60985d973eaa312715ac5ca87344555875dac2a88f8ba6539775f1ab3d996/analysis/1468071419
And the JS: https://www.virustotal.com/en/file/00299aa11962fb6c8bf22ab85aafccadde4c5d9e1a3ed2a236d1055a1da83986/analysis/1468070297

http://i.imgur.com/tAvfINQ.jpg

8

This job already wrecks my life. Dont need it to wreck my home computer also.

9

Looks like it may be a false positive on any site using Incapsulas service or certain files.

10

I hope it was just a false positive since the alert seems to be gone now.

11

May have been cause i got that alert on random other sites as well constantly.

12

We must get an official word or not, I just restarted and don’t notice anything horribly wrong.

13

HanzaZ is notified, keep an eye out on the topic :slight_smile:

14

I’m like suddenly becoming very nervous, I have no idea why.

15

:smiley: No need to be nervous 8)
This detection (JS:Downloader-DFD) was indeed a false positive and has been fixed yesterday evening. Sorry for the false popups!

16

Thanks for all the hard work and for the peace of mind.

17

EmoHobo, you can now change your avatar to something that better reflects the peace of mind you are talking about :smiley: