How do I check unknown files in OpenCart?
Compare files against a clean OpenCart version and known extensions, check modification dates, unknown PHP files, suspicious redirects, and code that does not belong to your theme or plugins.
For general hardening, see the OpenCart security guide. If there are signs of compromise, prefer a technical audit.