How can I remove the JS/Adware.Subprop.Z virus from my website?

[kate32north]

My website is getting a pop up virus. I've disabled pop ups from Vajaro, which shopify support initially told me was likely the problem. I was then told it was peoples browsing habits since it's not always duplicatable. ITS NOT. Its happening to many customers. I have the name of the virus, but no one at shopify has been able to help me yet. Please help! 

Here's the name of the virus that my virus protection software is seeing:

JS/Adware.Subprop.Z

I'm using a antivirus program called ESET Nord32 Antivirus

[WhiteWater_Web]

Hi there - what is the link of the website? We can help take a look.

Cheers.

WhiteWater Web

info@whitewatersolutions.com

[kate32north]

[kate32north]

32northboutique.com Problem is, I've never been able to recreate it on my mac... but ive had customers send me photos all week of the issue. 

[WhiteWater_Web]

You definitely have an issue. We would require collaborator access to the site to do any more deep diving. 

We were able to replicate the errors and see some bad code being executed.

Hit us up via email if you need a further hand.

Take care.

WhiteWater Web

info@whitewatersolutions.com

[WhiteWater_Web]

We're happy we could assist with this; the malware/bad code has been removed.

For those interested this was all triggered by bad, obfuscated code well hidden within an old app on the store. Be careful what you are adding to your theme files folks!

Happy holidays.

WhiteWater Web

[WhiteWater_Web]

We have recently debugged and removed the exact same malware for another site; however, this time the bad code was hidden directly in the theme files (via include code which was making calls to bad, third party code).

We highly encourage you to consult with Shopify support, or Shopify experts, before considering to add apps to your store. Apps are very easy to add but often not understood - and can be difficult to remove.

Take care.

WhiteWater Web