Blog Was Hacked. Need To Remove Malicious Code

To cut a long story short, I was a victim of the latest WP Hack, see here for details

https://www.techjaws.com/wordpress-self-hosted-blogs-under-attack/

I cleaned up the php files but still readers are being redirected to malware sites. I believe I found the code, when I’m on my homepage and view the source, I see some script before the closing body tag.

This is what is responsible for the redirects.

I use the Thesis theme. In my thesis options this script isn’t found. Where can I find it to delete it i.e. what file would this be contained in?

Thanks for your help!