unknown authorize.net payment method

hello

i believe out cart got compromised. when we check out i do see the 1st paymetn option as Authorize.net. under admin-> payment section i do not see this extension/payment method. we did not install this payment method. this appeared somehow. when i checked my files i do see aim files. when i remove those aim files when i check out im getting model error.

i have already changed my password etc etc. now all i want is to remove this authorize.net files and remove this payment method for ever. any help is much appreciated.

thanks
John

read this:
http://forum.opencart.com/viewtopic.php?f=20&t=144753
Ernie
bigmax.ch/os/

Hello

I did, It didn't help. As mentioned earlier, when I manually remove those files, it's giving model error during the checkout process. I had to restore those aim files again and now the shopping cart is working but 1st option is authorize.net. isnt there another way to remove this?

Download the entire Shop Software, exept for images, and cached System + VqMod Files, to the PC.
Export/download and then check your DB for any entries, containing a value named 'authorize'
Check your downloaded software for anything, valued 'authorize', and check, in what files it exists.

Then. compare such files with a 'virgin Software,
same version, to make sure, it belongs there, exactly in the form, found on
one or more of your latest shop files.

Clean out the system/cache Folder and the VqMod Cache Folder, before uploading
new files.

That's about, how I would do it.

Possible REASON für Infection:
Possibly, some of you Fellows use certain popular brands THEMES, paid ones.
Looking around, I found some, exactly looking like paid one's, but they came for FREE.
So, while checking the Source, as usual, I found rather 'strange' Stuff, in some of it.
CONCLUSION:
YOU NEVER KNOW...

Good Luck
Ernie
bigmax.ch/os/