I have a database that is being hosted by my hosting company, but it has been injected with code as a part of the well known injection spree from China. I've downloaded Microsoft SQL Server 2005 (its a 2005 db) and I can connect to the remote location, and pull up the database. I can run a query on specific tables and can see the code that was injected.

How do I go about manually removing the code? I need to be able to go in and edit the actual fields but can't figure out how to do it.

Any one have any advice?