How to remove some external script inside my blog?

Hello Friend,
The blog area on my site has been reported as Site attack by google, i deleted all the existed files and replaced with the newer version and changed the config file. Then on, submitted to google for review to change the statues of Site Attack.Then also it reports with some script still exists within the blog i:e;<script src=https://pragatiind.com/images/gifimg.php ></script>. What google picked in which this reports in is on the URL as: https://www.somesite.com/blog/?cat=5&paged=2. I gone through the custom template Header and Footer pages and didn’t found any of these scripts.
I’m really messed-up….can’t find it out.

Please help me….its an Urgent!!