Remove the hole in Opencart, clean the files from the virus

Hello to the site climbed worm, there is a list of files infected. We need to eliminate these files and close that hole.

The virus makes access and puts on 404.php file manager B Ge Team File Manager.

List of infected files:

/public_html/image/ALFA_DATA/alfacgiapi/py.alfa

/public_html/image/ALFA_DATA/alfacgiapi/bash.alfa

/public_html/image/ALFA_DATA/alfacgiapi/.htaccess

/public_html/catalog/404.php