I believe my site was hacked through another components commenting system which just in the last few days had an alert put out. Since then, I have done almost everything I can think of to clean the site up, including removing the jx sharelink files from my site. However, I am still getting url's such as the following:
http://sitename.com/index.php/plugins/content/jxsharelink/images/home/joomgallery.html

This should be http://sitename.com/joomgallery.html
http://sitename.com/index.php/plugins/content/jxsharelink/images/home/templates/system/css/modules/mod_simpletweet/kunenaforum153.html

It should be: http://sitename.com/kunenaforum153.html

As you can see the thing in common is the jxsharelink. As mentioned, jxsharelink is no longer on my site. As far as I know there is nothing in the database as well.

I wonder if anyone else has seen a problem such as this. I am at a loss how to proceed.

Thanks