I shan't be sharing any personal information here.  Instead, I thought I'd build a little knowledgebase about the all too common Mass SQL Injections perpetrated by the Danmec Asprox botnets and which are causing headaches for literally hundreds of thousands of administrators (yes, you're in good company - fear not).

I'll be fleshing this out as I go along, but here's a start:

Microsoft Advisory.  The Suggested Actions section details 3 tools that can help you identify infected pages (scrawlr), protect vulnerable pages (urlscan) and detect vulnerable code (Microsoft Source Code Analyzer for SQL Injection).

http://www.microsoft.com/technet/security/advisory/954462.mspx

There's a wealth of information on these infections:

http://www.google.co.uk/search?q=asprox+danmec+sql+injection

And at Experts Exchange, loads of practical advice:

http://search.experts-exchange.com/simpleSearch.jsp?q=sql+injection