Malware in my Site

drseventy8
New Member
4 0 0

Hi there, yesterday I was checking my Google Adwords and they paused my ads due to malicious suspicion.

I checked it myself but couldn't find any Malware.

I asked for Google & Shopify help but they told me to do it myself.

I have no clue what to do.

Google email me with instruction to remove these sites that contain malware: 

https://coin-hive.com/lib/coinhive.min.js
https://coinhive.com/lib/coinhive.min.js
https://coinhive.com/lib/cryptonight-asmjs.min.js

 

I have no idea what to do, any help will be appreciated.

0 Likes
Jason
Shopify Expert
10260 142 1940

Those are bitcoin mining javascript files so would be rather odd to have included. If you have an app that's adding these that's dodgy. Did you add these yourself?

A link to the store would be helpful to see where these are coming from.

I jump on these forums to help and share some insights. Not looking to be hired, and not looking for work.

Don't hand out staff invites or give admin password to forum members unless absolutely needed. In most cases the help you need can be handled without that.


★ http://freakdesign.com.au ★
drseventy8
New Member
4 0 0

Sorry i forgot to include my site: www.capodimonte.co.id

These are the app that I'm using:

 

 

 

0 Likes
Jason
Shopify Expert
10260 142 1940

Looking at the site I can see the code is hard coded in so isn't loading dynamically. I would guess based on the location that it's in index.liquid. Not convinced it's come from those apps so would be thinking this is human addition first.

You'll want to review who has access to your store to determine who might have made this change if not by yourself. Have you had others editing your theme?

If the error only just came from Google it's likely this was a recent addition too. Doesn't take Google long to send out warnings.

The code will be quick to remove so it's an easy solve.

I jump on these forums to help and share some insights. Not looking to be hired, and not looking for work.

Don't hand out staff invites or give admin password to forum members unless absolutely needed. In most cases the help you need can be handled without that.


★ http://freakdesign.com.au ★
drseventy8
New Member
4 0 0

I'm sorry, but can you explain to me how I can remove this code?

Thank you

0 Likes
drseventy8
New Member
4 0 0

I deleted the script. How do I check if I deleted all of it?

 

Thanks

0 Likes
Jason
Shopify Expert
10260 142 1940

You can check with your browser console to see what network resources are being called. I did a check of the home page and it looks like it's no longer loading.

I jump on these forums to help and share some insights. Not looking to be hired, and not looking for work.

Don't hand out staff invites or give admin password to forum members unless absolutely needed. In most cases the help you need can be handled without that.


★ http://freakdesign.com.au ★
Peter_van_Zyl
New Member
1 0 0

Hi,

On that note, how do i delete this code?

 

 

0 Likes
FinestFlatware_
New Member
1 0 0

Same issue just started today. All of our Google Adwords CPC ads linking to collections & pages have been disapproved as a result of this coin-hive malware found. Any help to fix this issue would be greatly appreciated.

FinestFlatware.com

0 Likes

Hey 

 

having this issue in 2019.

 

How can I check

 

this is the file google points

http://sync.graph.bluecava.com/js/bc.js

William Alencar
GoodFy Brasil
0 Likes