Hello, the URL I posted is typical for the BlackHole2 exploit. I don’t know about website cleaning tools, but I think you have some backup of your site code so you can compare it.
Milos