Malicious code?

[Christian Mendieta]

Hi!
I'm trying to create a campaign on Google Adwords, however, they say that I have malicious code, which doesn't make sense to me, maybe I'm missing an instruction on my nginx config?

Upon reviewing the site, these are the links to be removed which are malicious.

 http://mysite.com/
 https://mysite.com/api/plugins/google-analytics
 https://mysite.com/assets/js-enabled.css
 https://mysite.com/assets/language/en-US/calendar.json?v=mvh8iq19hfs
 https://mysite.com/assets/language/en-US/global.json?v=mvh8iq19hfs
 https://mysite.com/assets/language/en-US/language.json?v=mvh8iq19hfs
 https://mysite.com/assets/language/en-US/modules.json?v=mvh8iq19hfs
 https://mysite.com/assets/language/en-US/topic.json?v=mvh8iq19hfs
 https://mysite.com/assets/nodebb.min.js?v=mvh8iq19hfs
 https://mysite.com/assets/plugins/nodebb-plugin-recent-cards/static/bxslider/images/bx_loader.gif
 https://mysite.com/assets/plugins/nodebb-plugin-recent-cards/static/bxslider/images/controls.png
 https://mysite.com/assets/src/client/chats/messages.js?v=mvh8iq19hfs
 https://mysite.com/assets/src/client/chats/recent.js?v=mvh8iq19hfs
 https://mysite.com/assets/src/client/chats/search.js?v=mvh8iq19hfs
 https://mysite.com/assets/src/modules/composer.js?v=mvh8iq19hfs
 https://mysite.com/assets/src/modules/composer/autocomplete.js?v=mvh8iq19hfs
 https://mysite.com/assets/src/modules/composer/categoryList.js?v=mvh8iq19hfs
 https://mysite.com/assets/src/modules/composer/controls.js?v=mvh8iq19hfs
 https://mysite.com/assets/src/modules/composer/drafts.js?v=mvh8iq19hfs
 https://mysite.com/assets/src/modules/composer/formatting.js?v=mvh8iq19hfs
 https://mysite.com/assets/src/modules/composer/preview.js?v=mvh8iq19hfs
 https://mysite.com/assets/src/modules/composer/resize.js?v=mvh8iq19hfs
 https://mysite.com/assets/src/modules/composer/tags.js?v=mvh8iq19hfs
 https://mysite.com/assets/src/modules/composer/uploads.js?v=mvh8iq19hfs
 https://mysite.com/assets/src/modules/mousetrap.js?v=mvh8iq19hfs
 https://mysite.com/assets/src/modules/pulling.js?v=mvh8iq19hfs
 https://mysite.com/assets/src/modules/scrollStop.js?v=mvh8iq19hfs
 https://mysite.com/assets/src/modules/sounds.js?v=mvh8iq19hfs
 https://mysite.com/assets/src/modules/string.js?v=mvh8iq19hfs
 https://mysite.com/assets/stylesheet.css?v=mvh8iq19hfs
 https://mysite.com/assets/templates/composer.tpl?v=mvh8iq19hfs
 https://mysite.com/assets/templates/modules/taskbar.js?v=mvh8iq19hfs
 https://mysite.com/assets/templates/partials/calendar/event-creation-modal.js?v=mvh8iq19hfs
 https://mysite.com/assets/uploads/profile/29-profileavatar.jpeg
 https://mysite.com/assets/uploads/profile/7-profileavatar.jpeg
 https://mysite.com/assets/uploads/system/site-logo.png
 https://mysite.com/assets/uploads/system/touchicon-36.png
 https://mysite.com/assets/vendor/fontawesome/fonts/fontawesome-webfont.eot?
 https://mysite.com/assets/vendor/jquery/timeago/locales/jquery.timeago.en.js
 https://mysite.com/favicon.ico?v=mvh8iq19hfs
 https://mysite.com/plugins/nodebb-plugin-markdown/styles/railscasts.css
 https://mysite.com/socket.io/?EIO=3&transport=polling&t=M6Cq4uO
 https://mysite.com/socket.io/?EIO=3&transport=polling&t=M6Cq4vz&sid=hbHy0FCKhrxO1AXyAABF
 https://mysite.com/socket.io/?EIO=3&transport=polling&t=M6Cq4wF&sid=hbHy0FCKhrxO1AXyAABF
 https://mysite.com/socket.io/?EIO=3&transport=polling&t=M6Cq4wG&sid=hbHy0FCKhrxO1AXyAABF
 https://mysite.com/socket.io/?EIO=3&transport=polling&t=M6Cq4wV&sid=hbHy0FCKhrxO1AXyAABF
 https://mysite.com/socket.io/?EIO=3&transport=polling&t=M6Cq4wW&sid=hbHy0FCKhrxO1AXyAABF
 https://mysite.com/socket.io/?EIO=3&transport=polling&t=M6Cq4wl&sid=hbHy0FCKhrxO1AXyAABF
 https://mysite.com/socket.io/?EIO=3&transport=polling&t=M6Cq4wt&sid=hbHy0FCKhrxO1AXyAABF
 https://mysite.com/socket.io/?EIO=3&transport=polling&t=M6Cq4x6&sid=hbHy0FCKhrxO1AXyAABF
 https://mysite.com/socket.io/?EIO=3&transport=polling&t=M6Cq4xA
 https://mysite.com/socket.io/?EIO=3&transport=polling&t=M6Cq4xO&sid=ibwbc_HXakDTgmRFAABG
https://mysite.com/socket.io/?EIO=3&transport=polling&t=M6Cq4xZ&sid=ibwbc_HXakDTgmRFAABG
 https://mysite.com/socket.io/?EIO=3&transport=polling&t=M6Cq4xb&sid=ibwbc_HXakDTgmRFAABG
 https://mysite.com/socket.io/?EIO=3&transport=polling&t=M6Cq5An&sid=ibwbc_HXakDTgmRFAABG
 https://mysite.com/socket.io/?EIO=3&transport=polling&t=M6Cq5Ar
 https://mysite.com/socket.io/?EIO=3&transport=polling&t=M6Cq5Ax&sid=WrsP5ACBm0te24JFAABH
 https://mysite.com/socket.io/?EIO=3&transport=polling&t=M6Cq5B9&sid=WrsP5ACBm0te24JFAABH
 https://mysite.com/socket.io/?EIO=3&transport=polling&t=M6Cq5BB&sid=WrsP5ACBm0te24JFAABH
 https://mysite.com/socket.io/?EIO=3&transport=polling&t=M6Cq5QS&sid=WrsP5ACBm0te24JFAABH
 https://mysite.com/socket.io/?EIO=3&transport=polling&t=M6Cq5QW
 https://mysite.com/socket.io/?EIO=3&transport=polling&t=M6Cq5Qn&sid=dFgsA_vrH8gq_zqMAABI
 https://mysite.com/socket.io/?EIO=3&transport=polling&t=M6Cq5Qx&sid=dFgsA_vrH8gq_zqMAABI
 https://mysite.com/socket.io/?EIO=3&transport=polling&t=M6Cq5Qz&sid=dFgsA_vrH8gq_zqMAABI
 https://mysite.com/socket.io/?EIO=3&transport=polling&t=M6Cq5g7&sid=dFgsA_vrH8gq_zqMAABI
https://mysite.com/socket.io/?EIO=3&transport=polling&t=M6Cq5gB
 https://mysite.com/socket.io/?EIO=3&transport=polling&t=M6Cq5gH&sid=ajZFyAx7GhLQRpxXAABJ
 https://mysite.com/socket.io/?EIO=3&transport=polling&t=M6Cq5gP&sid=ajZFyAx7GhLQRpxXAABJ
 https://mysite.com/socket.io/?EIO=3&transport=polling&t=M6Cq5gR&sid=ajZFyAx7GhLQRpxXAABJ
 https://mysite.com/socket.io/?EIO=3&transport=polling&t=M6Cq5vs
 https://mysite.com/socket.io/?EIO=3&transport=polling&t=M6Cq5vz&sid=NJ80Sz2ftAb8FdK7AABK
 https://mysite.com/socket.io/?EIO=3&transport=polling&t=M6Cq5w7&sid=NJ80Sz2ftAb8FdK7AABK
 https://mysite.com/socket.io/?EIO=3&transport=polling&t=M6Cq5w9&sid=NJ80Sz2ftAb8FdK7AABK
https://mysite.com/socket.io/?EIO=3&transport=websocket&sid=NJ80Sz2ftAb8FdK7AABK
 https://mysite.com/socket.io/?EIO=3&transport=websocket&sid=WrsP5ACBm0te24JFAABH
 https://mysite.com/socket.io/?EIO=3&transport=websocket&sid=ajZFyAx7GhLQRpxXAABJ
 https://mysite.com/socket.io/?EIO=3&transport=websocket&sid=dFgsA_vrH8gq_zqMAABI
 https://mysite.com/socket.io/?EIO=3&transport=websocket&sid=hbHy0FCKhrxO1AXyAABF
 https://mysite.com/socket.io/?EIO=3&transport=websocket&sid=ibwbc_HXakDTgmRFAABG

Thanks for your help!
Chris

[psychobunny]

Hi @Christian-Mendieta could you paste the entire conversation so we can get some context? Thanks