i think u should do a scan with an antirus to ur files . the easy way is via Cpanel. also take a look to files in the root of ur shop. in my case was a file called B2B.php
B2B sound like a file that is from the shop , but it was not.
and change also backoffice password