Common task · estimated 1 business day · written report included
Spam redirects or scripts you didn’t add? Removed, documented, prevented.
Pop-ups you never installed, customers redirected somewhere ugly, fake orders trickling in. It’s unsettling — and in most cases it’s removable code sitting in your theme, findable by reading carefully.
Scope-based proposal first — you approve and pay, then work starts.
Malware & Spam Script Removal
A full audit of your theme code and store settings, the bad code removed, and a written record of all of it.
What’s included
- Audit theme code and store settings for injected scripts, spam redirects, and fake-order bot symptoms
- Review staff and collaborator access for accounts that shouldn’t be there
- Remove malicious code from the theme
- Written report: what was found, what was removed, and how to prevent recurrence — password hygiene, app audit, staff access review
Not included
- Compromised email or hosting outside Shopify
- Ongoing monitoring
- Recovering a stolen store account — that’s Shopify Support’s job, and I’ll point the way
The audit
Where the bad code actually hides
Shopify itself is hard to breach — what gets stores in trouble is usually a leaked or reused password, a staff or collaborator account that should have been removed, or code that came in through the theme. So that’s where I look:
- Theme files. Injected script tags in layout files and snippets — the classic home for redirects and popups, often obfuscated to look like analytics.
- Legacy script settings. Old “additional scripts” areas that nobody looks at anymore but every page still loads.
- People with keys. The staff and collaborator list — an account you don’t recognize is a finding, not a footnote.
- Leftover app code. Departed apps whose remnants still execute — sometimes the “malware” turns out to be a zombie app, which is good news and still worth removing.
Why the written report matters
Deleting bad code takes an afternoon. Knowing it won’t come back is what you’re actually paying for. The report you get says what was found and where, what was removed, and the specific steps that close the door it came through — password hygiene, an app audit, and a staff access review you can repeat yourself.
No scare tactics: most cleanups are routine, and I’ll tell you plainly how serious yours was. If the compromise reaches beyond Shopify — your email, your hosting elsewhere — or your store account itself was stolen, parts of that are out of my reach, and the report will say exactly which parts and who handles them.
How this works
Careful by design — especially on a store that’s already been touched
-
01
You describe the problem in plain English.
“Customers say my site redirects them somewhere weird” is a complete brief. Screenshots help.
-
02
I figure out what actually needs to change.
The audit finds every instance, not just the loud one that made you search for help.
-
03
It happens safely on a copy first.
Theme cleanup runs on a duplicated, unpublished theme — nothing disappears from your live store until you’ve seen the clean version.
-
04
You see it before it goes live.
Preview link, your approval, then publish — in a publishing window agreed with you.
-
05
If it breaks, I fix it free.
Thirty days on my delivered work — and the report doubles as your record of exactly what changed.
Describe the problem in plain English. I’ll figure out what actually needs to change, do it safely on a copy of your store first, show you before anything goes live, and fix it free if it breaks.
-
Delivered as proposed, or made right. If work misses the proposal, I fix it free — and refund anything I can't make match.
-
30-day warranty. Defects in my delivered work, fixed free.
-
One clear proposal. The price is based on project scope and agreed before work starts.
-
Your live store stays untouched. All work on an unpublished theme copy — you preview and approve before anything goes live.
Scope-based proposal first — you approve and pay, then work starts.
Not sure it fits? Ask in chat — I’ll tell you straight if it’s not a fit.
If this isn’t quite it
Fix Broken Theme Layout
If something looks broken rather than hijacked, it’s probably this.
est. 1 business day
Speed Optimization Quick Wins
Dead scripts slow stores down even when they’re harmless.
est. 1–2 business days
App Install & Configuration
Replacing a sketchy app with a trustworthy one, set up cleanly.
est. 1 business day
Beyond these tasks: I also build custom Shopify apps — my flagship work — plus integrations, redesigns, and bigger builds. See all services.
No scare tactics here: most cleanups are routine. If your case needs Shopify Support instead of me, I’ll point the way — before you’ve paid for anything.