this is a very very bad guy, he installed the mod for me and i paid him $120 which was not working, i had to report to my credit card to file dispute, and he logged in my web site using the password i gave him and broke down my web site, fortunately i could recover it and changed password, he keep trying to using the password and similar phrase to log in.
why i know it was him, xcart has the master log in failure warning and i got the ip address was from 24.40.216.236 north carolina, i found his info from the same address:
Registrant:
PHP Site Solutions
Technical Contact:
Langevin, Jonathan
support@phpsitesolutions.com
PHP Site Solutions
235 N. High Point Rd
Southport, North Carolina 28461
United States
7049050271
So, if you guy paid him and no respond, call his phone number 704-905-0271, first file the dispute from your credit card company, i swear if this guy try again to log in my admin, i will report to the policy and anti hack organization.