update wordpress and all plugins and themes.
change passwords (be creative)
check all files for strange code
delete bogus users
try a security plugin like wordfence.
I was using the eStore theme as well, but switched to twenty-eleven to see if the problem still existed. I have no plugins activated, and my cart shows empty at the check-out.
