Hello all, my first post and that to for an abandoned topic, please excuse me. Not sure if "authsecure" has been found but i did found the culprit code and sharing it.
Present in 4 Files:
1) admin/cre_marketplace.php not sure where it is called
2) admin/messages.php already discussed
3) admin/includes/javascript/head_news.js culprit file delete all the content
4) admin/includes/javascript/crenews_script.js not sure where it is called
Hope this helps.