Re: Urgent: Deciphering binary code executed against the database

You might want to do the same loop this guy used to fix the data by
doing a REPLACE() to replace all instances of that <script> link with
and empty string ''.

DECLARE @[EMAIL PROTECTED]
 = '<script src=http://www.killwow1.cn/g.js></script>'
 --
DONT GO HERE OR CLICK THIS LINK

DECLARE @[EMAIL PROTECTED]
 varchar(255),@[EMAIL PROTECTED]
 varchar(255)
DECLARE Table_Cursor CURSOR FOR select a.name,b.name
  from sysobjects a,syscolumns b
  where a.id=b.id and a.xtype='u' and (b.xtype=99 or b.xtype=35 or
b.xtype=231 or b.xtype=167)

OPEN Table_Cursor
  FETCH NEXT FROM  Table_Cursor INTO @[EMAIL PROTECTED]
  WHILE(@[EMAIL PROTECTED]
)
    BEGIN
      exec('update ['+@[EMAIL PROTECTED]
']
            set ['+@[EMAIL PROTECTED]
']= REPLACE('+@[EMAIL PROTECTED]
',''' + @[EMAIL PROTECTED]
 + ''', '''')'
      FETCH NEXT FROM  Table_Cursor INTO @[EMAIL PROTECTED]
    END CLOSE Table_Cursor
DEALLOCATE Table_Cursor

....I think that's right, but I didn't test it or compile it.  That
should remove the bad data.