magento 1.9.3.7 - google Tag Manager Planned maintenance scheduled April 17/18, 2019 at 00:00UTC (8:00pm US/Eastern) Announcing the arrival of Valued Associate #679: Cesar Manara Unicorn Meta Zoo #1: Why another podcast?text near search bar magento ce 1.9Cannot Log Back into Magento admin 1.9.xGoogle Tag ManagerHow to remove a payment option from onepage checkout?Recently viewed/report issue Magento 1.9Google tag scriptDeleted Magento 1,9 database - now get error There has been an error processing your requestMagento 1.9 - MYGENTO_ logs flood serverHow to install Google TAG Manager (GTM) to Magento 1.9.2 without extension?Magento Site Layout Breaks Once a Day - Emptying Var/Cache Fixes

What are the performance impacts of 'functional' Rust?

What is the electric potential inside a point charge?

Blender game recording at the wrong time

Can I throw a longsword at someone?

Replacing HDD with SSD; what about non-APFS/APFS?

Cauchy Sequence Characterized only By Directly Neighbouring Sequence Members

How to say that you spent the night with someone, you were only sleeping and nothing else?

Fishing simulator

Who can trigger ship-wide alerts in Star Trek?

Estimated State payment too big --> money back; + 2018 Tax Reform

How is simplicity better than precision and clarity in prose?

Antler Helmet: Can it work?

Jazz greats knew nothing of modes. Why are they used to improvise on standards?

Unexpected result with right shift after bitwise negation

Can smartphones with the same camera sensor have different image quality?

Estimate capacitor parameters

What items from the Roman-age tech-level could be used to deter all creatures from entering a small area?

Why does this iterative way of solving of equation work?

What is the order of Mitzvot in Rambam's Sefer Hamitzvot?

What would be Julian Assange's expected punishment, on the current English criminal law?

Why is "Captain Marvel" translated as male in Portugal?

Why is there no army of Iron-Mans in the MCU?

If I can make up priors, why can't I make up posteriors?

Why use gamma over alpha radiation?



magento 1.9.3.7 - google Tag Manager



Planned maintenance scheduled April 17/18, 2019 at 00:00UTC (8:00pm US/Eastern)
Announcing the arrival of Valued Associate #679: Cesar Manara
Unicorn Meta Zoo #1: Why another podcast?text near search bar magento ce 1.9Cannot Log Back into Magento admin 1.9.xGoogle Tag ManagerHow to remove a payment option from onepage checkout?Recently viewed/report issue Magento 1.9Google tag scriptDeleted Magento 1,9 database - now get error There has been an error processing your requestMagento 1.9 - MYGENTO_ logs flood serverHow to install Google TAG Manager (GTM) to Magento 1.9.2 without extension?Magento Site Layout Breaks Once a Day - Emptying Var/Cache Fixes



.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty margin-bottom:0;








0















I have got a problem with a gtm script. This line always appears in all of my cms-blocks:

<script src="https://googletagmanager.eu/gtm.js"></script>



After removing this in the Database - the next day it was again included in all blcoks.



I've searched the entire files - didn't find anything near "googletagmanager" or "gtm.js"










share|improve this question
























  • If you have installed before a extension for that , try to disable it first, flush cache, remove the files. If not: Check if you have added this script in the Design Configurations. Do a grep on the root files : grep -irH "googletagmanager" .

    – Ylgen Guxholli
    Oct 2 '18 at 9:43












  • thanks for the hint. There is no extension - never implemented googletagmanager. Also did a grep on the root files - the only result was my remove command in the .mysql_history: update cms_block set content=replace(content,"<script src="googletagmanager.eu/gtm.js"></script>","");

    – Mirko Babic
    Oct 2 '18 at 9:57











  • If you have external page cache enabled, be sure to flush that too.

    – Liam McArthur
    Oct 2 '18 at 10:04











  • external full page cache is disabled

    – Mirko Babic
    Oct 2 '18 at 10:10











  • great! thank you, we could see in the trigger as well and fixed.

    – hari
    Oct 18 '18 at 20:27

















0















I have got a problem with a gtm script. This line always appears in all of my cms-blocks:

<script src="https://googletagmanager.eu/gtm.js"></script>



After removing this in the Database - the next day it was again included in all blcoks.



I've searched the entire files - didn't find anything near "googletagmanager" or "gtm.js"










share|improve this question
























  • If you have installed before a extension for that , try to disable it first, flush cache, remove the files. If not: Check if you have added this script in the Design Configurations. Do a grep on the root files : grep -irH "googletagmanager" .

    – Ylgen Guxholli
    Oct 2 '18 at 9:43












  • thanks for the hint. There is no extension - never implemented googletagmanager. Also did a grep on the root files - the only result was my remove command in the .mysql_history: update cms_block set content=replace(content,"<script src="googletagmanager.eu/gtm.js"></script>","");

    – Mirko Babic
    Oct 2 '18 at 9:57











  • If you have external page cache enabled, be sure to flush that too.

    – Liam McArthur
    Oct 2 '18 at 10:04











  • external full page cache is disabled

    – Mirko Babic
    Oct 2 '18 at 10:10











  • great! thank you, we could see in the trigger as well and fixed.

    – hari
    Oct 18 '18 at 20:27













0












0








0








I have got a problem with a gtm script. This line always appears in all of my cms-blocks:

<script src="https://googletagmanager.eu/gtm.js"></script>



After removing this in the Database - the next day it was again included in all blcoks.



I've searched the entire files - didn't find anything near "googletagmanager" or "gtm.js"










share|improve this question
















I have got a problem with a gtm script. This line always appears in all of my cms-blocks:

<script src="https://googletagmanager.eu/gtm.js"></script>



After removing this in the Database - the next day it was again included in all blcoks.



I've searched the entire files - didn't find anything near "googletagmanager" or "gtm.js"







magento-1.9






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited Dec 10 '18 at 5:32









Teja Bhagavan Kollepara

2,99341949




2,99341949










asked Oct 2 '18 at 9:28









Mirko BabicMirko Babic

82




82












  • If you have installed before a extension for that , try to disable it first, flush cache, remove the files. If not: Check if you have added this script in the Design Configurations. Do a grep on the root files : grep -irH "googletagmanager" .

    – Ylgen Guxholli
    Oct 2 '18 at 9:43












  • thanks for the hint. There is no extension - never implemented googletagmanager. Also did a grep on the root files - the only result was my remove command in the .mysql_history: update cms_block set content=replace(content,"<script src="googletagmanager.eu/gtm.js"></script>","");

    – Mirko Babic
    Oct 2 '18 at 9:57











  • If you have external page cache enabled, be sure to flush that too.

    – Liam McArthur
    Oct 2 '18 at 10:04











  • external full page cache is disabled

    – Mirko Babic
    Oct 2 '18 at 10:10











  • great! thank you, we could see in the trigger as well and fixed.

    – hari
    Oct 18 '18 at 20:27

















  • If you have installed before a extension for that , try to disable it first, flush cache, remove the files. If not: Check if you have added this script in the Design Configurations. Do a grep on the root files : grep -irH "googletagmanager" .

    – Ylgen Guxholli
    Oct 2 '18 at 9:43












  • thanks for the hint. There is no extension - never implemented googletagmanager. Also did a grep on the root files - the only result was my remove command in the .mysql_history: update cms_block set content=replace(content,"<script src="googletagmanager.eu/gtm.js"></script>","");

    – Mirko Babic
    Oct 2 '18 at 9:57











  • If you have external page cache enabled, be sure to flush that too.

    – Liam McArthur
    Oct 2 '18 at 10:04











  • external full page cache is disabled

    – Mirko Babic
    Oct 2 '18 at 10:10











  • great! thank you, we could see in the trigger as well and fixed.

    – hari
    Oct 18 '18 at 20:27
















If you have installed before a extension for that , try to disable it first, flush cache, remove the files. If not: Check if you have added this script in the Design Configurations. Do a grep on the root files : grep -irH "googletagmanager" .

– Ylgen Guxholli
Oct 2 '18 at 9:43






If you have installed before a extension for that , try to disable it first, flush cache, remove the files. If not: Check if you have added this script in the Design Configurations. Do a grep on the root files : grep -irH "googletagmanager" .

– Ylgen Guxholli
Oct 2 '18 at 9:43














thanks for the hint. There is no extension - never implemented googletagmanager. Also did a grep on the root files - the only result was my remove command in the .mysql_history: update cms_block set content=replace(content,"<script src="googletagmanager.eu/gtm.js"></script>","");

– Mirko Babic
Oct 2 '18 at 9:57





thanks for the hint. There is no extension - never implemented googletagmanager. Also did a grep on the root files - the only result was my remove command in the .mysql_history: update cms_block set content=replace(content,"<script src="googletagmanager.eu/gtm.js"></script>","");

– Mirko Babic
Oct 2 '18 at 9:57













If you have external page cache enabled, be sure to flush that too.

– Liam McArthur
Oct 2 '18 at 10:04





If you have external page cache enabled, be sure to flush that too.

– Liam McArthur
Oct 2 '18 at 10:04













external full page cache is disabled

– Mirko Babic
Oct 2 '18 at 10:10





external full page cache is disabled

– Mirko Babic
Oct 2 '18 at 10:10













great! thank you, we could see in the trigger as well and fixed.

– hari
Oct 18 '18 at 20:27





great! thank you, we could see in the trigger as well and fixed.

– hari
Oct 18 '18 at 20:27










3 Answers
3






active

oldest

votes


















2














I was recently employed to remove this malware from a UK based magento website.



The domain is not actually a Google domain, it is malware, see here
https://www.hybrid-analysis.com/sample/c91d1e290fc46ede3930192c80ee1bb42d301e5d23dec47affc44a0a1cdea76f?environmentId=100



You have to go into your mysql database and look at the TRIGGERS, you'll see one that contains the malware. Then delete all the code snippets from your header, footer and static blocks.. the code should not return this time



Delete this entire trigger, then do a full security audit and change all passwords etc.






share|improve this answer























  • Hello Mark, thanks so much for the input - that solved my problem.

    – Mirko Babic
    Oct 4 '18 at 7:25











  • Glad to hear, and happy to help. I would also check your magento file and folder permissions as well as checking for any malicious backdoor files such as adminer.php

    – Mark Taylor
    Oct 5 '18 at 10:25


















2














This is a hack mostlty through adminer.php. In magento its inserted into the database as a trigger. The trigger fires after a checkout has been placed and will insert in database (cms_block and core_config_data). Steps to clean:



  1. login in adminer or phpmyadmin

  2. sql query: SHOW triggers;

  3. Delete the trigger from there: DROP TRIGGER IF EXISTS trigger.name

  4. replace database with senr(https://interconnectit.com/products/search-and-replace-for-wordpress-databases/comment-page-36/) or you can import export sql file and replace it with editor.

  5. remove adminer.php and senr if you used it





share|improve this answer
































    0














    I found mine in core_config_data - i searched in value for %googletagmanager%.
    Also in phpMyAdmin you can see all Triggers in the DB and you can edit them. I only had one Trigger and it was completely filled with "after-sales-order" commands which inserted the code in diffrent cms-blocks and footerblocks. Also i had the tag in every CMS-Block and CMS-Page






    share|improve this answer








    New contributor




    randomresult is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
    Check out our Code of Conduct.




















      Your Answer








      StackExchange.ready(function()
      var channelOptions =
      tags: "".split(" "),
      id: "479"
      ;
      initTagRenderer("".split(" "), "".split(" "), channelOptions);

      StackExchange.using("externalEditor", function()
      // Have to fire editor after snippets, if snippets enabled
      if (StackExchange.settings.snippets.snippetsEnabled)
      StackExchange.using("snippets", function()
      createEditor();
      );

      else
      createEditor();

      );

      function createEditor()
      StackExchange.prepareEditor(
      heartbeatType: 'answer',
      autoActivateHeartbeat: false,
      convertImagesToLinks: false,
      noModals: true,
      showLowRepImageUploadWarning: true,
      reputationToPostImages: null,
      bindNavPrevention: true,
      postfix: "",
      imageUploader:
      brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
      contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
      allowUrls: true
      ,
      onDemand: true,
      discardSelector: ".discard-answer"
      ,immediatelyShowMarkdownHelp:true
      );



      );













      draft saved

      draft discarded


















      StackExchange.ready(
      function ()
      StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fmagento.stackexchange.com%2fquestions%2f244693%2fmagento-1-9-3-7-google-tag-manager%23new-answer', 'question_page');

      );

      Post as a guest















      Required, but never shown

























      3 Answers
      3






      active

      oldest

      votes








      3 Answers
      3






      active

      oldest

      votes









      active

      oldest

      votes






      active

      oldest

      votes









      2














      I was recently employed to remove this malware from a UK based magento website.



      The domain is not actually a Google domain, it is malware, see here
      https://www.hybrid-analysis.com/sample/c91d1e290fc46ede3930192c80ee1bb42d301e5d23dec47affc44a0a1cdea76f?environmentId=100



      You have to go into your mysql database and look at the TRIGGERS, you'll see one that contains the malware. Then delete all the code snippets from your header, footer and static blocks.. the code should not return this time



      Delete this entire trigger, then do a full security audit and change all passwords etc.






      share|improve this answer























      • Hello Mark, thanks so much for the input - that solved my problem.

        – Mirko Babic
        Oct 4 '18 at 7:25











      • Glad to hear, and happy to help. I would also check your magento file and folder permissions as well as checking for any malicious backdoor files such as adminer.php

        – Mark Taylor
        Oct 5 '18 at 10:25















      2














      I was recently employed to remove this malware from a UK based magento website.



      The domain is not actually a Google domain, it is malware, see here
      https://www.hybrid-analysis.com/sample/c91d1e290fc46ede3930192c80ee1bb42d301e5d23dec47affc44a0a1cdea76f?environmentId=100



      You have to go into your mysql database and look at the TRIGGERS, you'll see one that contains the malware. Then delete all the code snippets from your header, footer and static blocks.. the code should not return this time



      Delete this entire trigger, then do a full security audit and change all passwords etc.






      share|improve this answer























      • Hello Mark, thanks so much for the input - that solved my problem.

        – Mirko Babic
        Oct 4 '18 at 7:25











      • Glad to hear, and happy to help. I would also check your magento file and folder permissions as well as checking for any malicious backdoor files such as adminer.php

        – Mark Taylor
        Oct 5 '18 at 10:25













      2












      2








      2







      I was recently employed to remove this malware from a UK based magento website.



      The domain is not actually a Google domain, it is malware, see here
      https://www.hybrid-analysis.com/sample/c91d1e290fc46ede3930192c80ee1bb42d301e5d23dec47affc44a0a1cdea76f?environmentId=100



      You have to go into your mysql database and look at the TRIGGERS, you'll see one that contains the malware. Then delete all the code snippets from your header, footer and static blocks.. the code should not return this time



      Delete this entire trigger, then do a full security audit and change all passwords etc.






      share|improve this answer













      I was recently employed to remove this malware from a UK based magento website.



      The domain is not actually a Google domain, it is malware, see here
      https://www.hybrid-analysis.com/sample/c91d1e290fc46ede3930192c80ee1bb42d301e5d23dec47affc44a0a1cdea76f?environmentId=100



      You have to go into your mysql database and look at the TRIGGERS, you'll see one that contains the malware. Then delete all the code snippets from your header, footer and static blocks.. the code should not return this time



      Delete this entire trigger, then do a full security audit and change all passwords etc.







      share|improve this answer












      share|improve this answer



      share|improve this answer










      answered Oct 2 '18 at 16:08









      Mark TaylorMark Taylor

      361




      361












      • Hello Mark, thanks so much for the input - that solved my problem.

        – Mirko Babic
        Oct 4 '18 at 7:25











      • Glad to hear, and happy to help. I would also check your magento file and folder permissions as well as checking for any malicious backdoor files such as adminer.php

        – Mark Taylor
        Oct 5 '18 at 10:25

















      • Hello Mark, thanks so much for the input - that solved my problem.

        – Mirko Babic
        Oct 4 '18 at 7:25











      • Glad to hear, and happy to help. I would also check your magento file and folder permissions as well as checking for any malicious backdoor files such as adminer.php

        – Mark Taylor
        Oct 5 '18 at 10:25
















      Hello Mark, thanks so much for the input - that solved my problem.

      – Mirko Babic
      Oct 4 '18 at 7:25





      Hello Mark, thanks so much for the input - that solved my problem.

      – Mirko Babic
      Oct 4 '18 at 7:25













      Glad to hear, and happy to help. I would also check your magento file and folder permissions as well as checking for any malicious backdoor files such as adminer.php

      – Mark Taylor
      Oct 5 '18 at 10:25





      Glad to hear, and happy to help. I would also check your magento file and folder permissions as well as checking for any malicious backdoor files such as adminer.php

      – Mark Taylor
      Oct 5 '18 at 10:25













      2














      This is a hack mostlty through adminer.php. In magento its inserted into the database as a trigger. The trigger fires after a checkout has been placed and will insert in database (cms_block and core_config_data). Steps to clean:



      1. login in adminer or phpmyadmin

      2. sql query: SHOW triggers;

      3. Delete the trigger from there: DROP TRIGGER IF EXISTS trigger.name

      4. replace database with senr(https://interconnectit.com/products/search-and-replace-for-wordpress-databases/comment-page-36/) or you can import export sql file and replace it with editor.

      5. remove adminer.php and senr if you used it





      share|improve this answer





























        2














        This is a hack mostlty through adminer.php. In magento its inserted into the database as a trigger. The trigger fires after a checkout has been placed and will insert in database (cms_block and core_config_data). Steps to clean:



        1. login in adminer or phpmyadmin

        2. sql query: SHOW triggers;

        3. Delete the trigger from there: DROP TRIGGER IF EXISTS trigger.name

        4. replace database with senr(https://interconnectit.com/products/search-and-replace-for-wordpress-databases/comment-page-36/) or you can import export sql file and replace it with editor.

        5. remove adminer.php and senr if you used it





        share|improve this answer



























          2












          2








          2







          This is a hack mostlty through adminer.php. In magento its inserted into the database as a trigger. The trigger fires after a checkout has been placed and will insert in database (cms_block and core_config_data). Steps to clean:



          1. login in adminer or phpmyadmin

          2. sql query: SHOW triggers;

          3. Delete the trigger from there: DROP TRIGGER IF EXISTS trigger.name

          4. replace database with senr(https://interconnectit.com/products/search-and-replace-for-wordpress-databases/comment-page-36/) or you can import export sql file and replace it with editor.

          5. remove adminer.php and senr if you used it





          share|improve this answer















          This is a hack mostlty through adminer.php. In magento its inserted into the database as a trigger. The trigger fires after a checkout has been placed and will insert in database (cms_block and core_config_data). Steps to clean:



          1. login in adminer or phpmyadmin

          2. sql query: SHOW triggers;

          3. Delete the trigger from there: DROP TRIGGER IF EXISTS trigger.name

          4. replace database with senr(https://interconnectit.com/products/search-and-replace-for-wordpress-databases/comment-page-36/) or you can import export sql file and replace it with editor.

          5. remove adminer.php and senr if you used it






          share|improve this answer














          share|improve this answer



          share|improve this answer








          edited Mar 1 at 19:31

























          answered Mar 1 at 17:06









          Vince VerhoevenVince Verhoeven

          1213




          1213





















              0














              I found mine in core_config_data - i searched in value for %googletagmanager%.
              Also in phpMyAdmin you can see all Triggers in the DB and you can edit them. I only had one Trigger and it was completely filled with "after-sales-order" commands which inserted the code in diffrent cms-blocks and footerblocks. Also i had the tag in every CMS-Block and CMS-Page






              share|improve this answer








              New contributor




              randomresult is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
              Check out our Code of Conduct.
























                0














                I found mine in core_config_data - i searched in value for %googletagmanager%.
                Also in phpMyAdmin you can see all Triggers in the DB and you can edit them. I only had one Trigger and it was completely filled with "after-sales-order" commands which inserted the code in diffrent cms-blocks and footerblocks. Also i had the tag in every CMS-Block and CMS-Page






                share|improve this answer








                New contributor




                randomresult is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
                Check out our Code of Conduct.






















                  0












                  0








                  0







                  I found mine in core_config_data - i searched in value for %googletagmanager%.
                  Also in phpMyAdmin you can see all Triggers in the DB and you can edit them. I only had one Trigger and it was completely filled with "after-sales-order" commands which inserted the code in diffrent cms-blocks and footerblocks. Also i had the tag in every CMS-Block and CMS-Page






                  share|improve this answer








                  New contributor




                  randomresult is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
                  Check out our Code of Conduct.










                  I found mine in core_config_data - i searched in value for %googletagmanager%.
                  Also in phpMyAdmin you can see all Triggers in the DB and you can edit them. I only had one Trigger and it was completely filled with "after-sales-order" commands which inserted the code in diffrent cms-blocks and footerblocks. Also i had the tag in every CMS-Block and CMS-Page







                  share|improve this answer








                  New contributor




                  randomresult is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
                  Check out our Code of Conduct.









                  share|improve this answer



                  share|improve this answer






                  New contributor




                  randomresult is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
                  Check out our Code of Conduct.









                  answered 2 days ago









                  randomresultrandomresult

                  1011




                  1011




                  New contributor




                  randomresult is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
                  Check out our Code of Conduct.





                  New contributor





                  randomresult is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
                  Check out our Code of Conduct.






                  randomresult is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
                  Check out our Code of Conduct.



























                      draft saved

                      draft discarded
















































                      Thanks for contributing an answer to Magento Stack Exchange!


                      • Please be sure to answer the question. Provide details and share your research!

                      But avoid


                      • Asking for help, clarification, or responding to other answers.

                      • Making statements based on opinion; back them up with references or personal experience.

                      To learn more, see our tips on writing great answers.




                      draft saved


                      draft discarded














                      StackExchange.ready(
                      function ()
                      StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fmagento.stackexchange.com%2fquestions%2f244693%2fmagento-1-9-3-7-google-tag-manager%23new-answer', 'question_page');

                      );

                      Post as a guest















                      Required, but never shown





















































                      Required, but never shown














                      Required, but never shown












                      Required, but never shown







                      Required, but never shown

































                      Required, but never shown














                      Required, but never shown












                      Required, but never shown







                      Required, but never shown







                      Popular posts from this blog

                      Category:9 (number) SubcategoriesMedia in category "9 (number)"Navigation menuUpload mediaGND ID: 4485639-8Library of Congress authority ID: sh85091979ReasonatorScholiaStatistics

                      Circuit construction for execution of conditional statements using least significant bitHow are two different registers being used as “control”?How exactly is the stated composite state of the two registers being produced using the $R_zz$ controlled rotations?Efficiently performing controlled rotations in HHLWould this quantum algorithm implementation work?How to prepare a superposed states of odd integers from $1$ to $sqrtN$?Why is this implementation of the order finding algorithm not working?Circuit construction for Hamiltonian simulationHow can I invert the least significant bit of a certain term of a superposed state?Implementing an oracleImplementing a controlled sum operation

                      Magento 2 “No Payment Methods” in Admin New OrderHow to integrate Paypal Express Checkout with the Magento APIMagento 1.5 - Sales > Order > edit order and shipping methods disappearAuto Invoice Check/Money Order Payment methodAdd more simple payment methods?Shipping methods not showingWhat should I do to change payment methods if changing the configuration has no effects?1.9 - No Payment Methods showing upMy Payment Methods not Showing for downloadable/virtual product when checkout?Magento2 API to access internal payment methodHow to call an existing payment methods in the registration form?