Recover SQL Injected Data Code _ database other

<% @LANGUAGE = "VBSCRIPT" codepage= "936"%>
<!--#include file= "inc/conn.asp"-->
<meta http-equiv= "Content-type" content= "text/html; charset=gb2312 ">
<%
Server. ScriptTimeout = 1000000
The ' xtype=99 ntext is similar to the text type, and the ntext type uses the Unicode standard character set.
' xtype=35 text is used to store large amounts of text data.
' xtype=231 nvarchar is used to define variable-length binary data with a maximum length of 4,000 characters.
' xtype=167 varchar store variable-length character data that can most often reach 8,000 characters
str = "' <script src=" http://e6t.3322.org/c.js "src=" Http://e6t.3322.org/c.js "></script>" " Trojan code added to the Text Type field
sql = "Select A.name as t_name,b.name as C_name, b.xtype from sysobjects a,syscolumns b WHERE a.id=b.id and a.xtype= ' U '" D (b.xtype=99 or b.xtype=35 or b.xtype=231 or b.xtype=167) "
Set rs = conn.execute (SQL)
While not rs.eof
T_name = RS ("t_name") ' Table name
C_name = RS ("C_name") ' Field name
Xtype = RS ("xtype") field type
If (xtype = or xtype = km) THEN
Conn.execute ("Update [" + T_name + "] set [" + C_name + "]=replace (CAST ([" + C_name + "] as varchar (8000))," + str + ", ' ')")
Else
Conn.execute ("Update [" + T_name + "] set [" + C_name + "]=replace ([" + C_name + "]," + str + ",") ")
End If
Rs.movenext
Wend
Response. Write ("has initially cleaned up the horse data, please refresh the page to try!") ")
%>