I have a database that is being hosted by my hosting company, but it has been injected with code as a part of the well known injection spree from China. I've downloaded Microsoft SQL Server 2005 (its a 2005 db) and I can connect to the remote location, and pull up the database. I can run a query on specific tables and can see the code that was injected.

How do I go about manually removing the code? I need to be able to go in and edit the actual fields but can't figure out how to do it.

Any one have any advice?

if I understand correctly, you need to actually look at the database tables and structure? if so, install Microsoft SQL Server Management Studio.

You have three options here. One is use Management Studio which is the equivalent to Enterprise Manager back in sql 2000. This tool then lets you manage databases, get access to tables and their fields, plus configure things like running maintenance plans etc.

The second option is you can download a 3rd party tool which does the same as management studio. Just do a search for them.

The third option is to write a server-side script that pulls out data, removes the offensive code, then updates the record.

But for future updating and maintenance, option 1 is probably the best bet. If you downloaded SQL 2005 then you can get management studio as either a separate download or together as the (SQL Server 2005 with tools) download. If you downloaded 2008, the "with tools" download is not yet available.

To download management studio you can go to the following link...

SQL Server Express 2005 Download

You will see Management studio on the lower left side of the page columns.

Hope this helps!

I have Management Studio, both the Express and Enterprise versions. I'm able to see the database and tables. However, I do not know how to use the software to actually edit the data in the fields. That's what I'm trying to find out how to do. I can use the Mgmt Studio to connect to the database. On the left, I can click on the database, it opens to a list of all the tables. I can click on a table, and it opens to a list of folders (Columns, Triggers, etc). I can even run a query on a table in the right hand pane, and it will display the results of the query at the bottom of the right hand pane. However, I'm not able or unsure of how to edit the actual tables.

That's what I'm needing help doing.

to edit the data, right-click on a table and choose "Open Table..". the table will open with writable fields.