Should I restore a backup or clean the infected OpenCart store?
If you have a clean backup from before the compromise, restoring can be the fastest path, but the original cause must still be fixed. If the backup is old or uncertain, clean the current store, audit files, and rotate passwords.
Before deciding, review the backup guide and consider a security audit so the issue does not return.