First try to check at sucuri.net, if you found your sites in red alert you need to check it manually. if you using wordpress you can use explosit scanner plugin to scan your code.