Is my website infected with Virus what.. how

I can tell you with absolutely certainty that the aes.js code is not malware. This is a false positive in your virus scanner, which is incorrectly blocking completely safe and harmless code. I’m not familiar with Bit Defender’s interface specifically. Maybe there is a way to add an exclusion rule to stop it from blocking our security code, and maybe there is way to report the issue to Bit Defender so they can review it and remove the incorrect block.