Website hacked. Redirects to iOS app on handhelds. Where is the problem?

My website Mr. Geek has been hacked. Not fully but sort of. The website is on Wordpress.

On handheld devices the attacker has injected a script that redirects the visitor on a iOS app (mobile app).

How do I trace the problem and resolve it. I feel there is a script in somewhere or probably a meta tag.