X-cart security expert needed now

my x-cart website has been hacked. The password for the provider login has been changed. I need a contractor who can help me recover my provider password and then set up x-cart to make this type of event less likely in the future. I need help right away. FYI, I have already changed the ftp and mysql passwords and changed the [login to view URL] file so that the only IP address that can administer x-cart is my current IP. Whoever hacked my site had turned on the store_cc and store_cvv2 variables in config.php. I have turned them back off already of course. Paul