Batch replace content in all tables of the database

Write something to fix malicious script code in the database

Select
'Update ['+ S. name + '] Set [' + C. name + '] =' + 'Replace ([' + C. name + '], ''white '','''')'
From sysobjects S, syscolumns C, policypes t
Where S. type = 'U' and S. ID = C. ID
And objectproperty (S. ID, N 'isusertable') = 1
And C. xusertype = T. xusertype
And T. Name in ('varchar ', 'nvarchar', 'Char ', 'nchar ')
Union
Select
'Update ['+ S. name + '] Set [' + C. name + '] =' + 'Replace (cast ([' + C. name + '] As varchar (8000), ''white '','''')'
From sysobjects S, syscolumns C, policypes t
Where S. type = 'U' and S. ID = C. ID
And objectproperty (S. ID, N 'isusertable') = 1
And C. xusertype = T. xusertype
And T. Name in ('text', 'ntext ')