I see it is sql injection ,but why all of those 12000 Web Site have same effect at same day with same scripts? Isn't sounds a Virus cause the same...

Please Give me some info about the cause of this problem,Im trying to find the same specially after find more than 12000 website have been infected by same Injection/virus...

I found the attacker in the log with same script but with different IP and from Chile

I got Same Attack at same date "25/9/2009"

you Can use thos SP to Replace all of YOUR Infected records :

1- Create SP

set ANSI_NULLS ON

set QUOTED_IDENTIFIER ON

go

ALTER PROC [dbo].[SearchReplaceAllTables]

(

@SearchStr nvarchar(100)

)

AS

BEGIN

-- Copyright © 2002 Narayana Vyas Kondreddi. All...