Hacked

I’ve been hacked with a text string (cialis ad) and link in the header of site. The hack is clever in that it doesn’t show up when log-in cookies are present in my computer, but only when they are cleared. The theme is wp-blosson. Any ideas where to look to remove this hack?