<div style="display:none">process of abortion <a href="http://longrangesystems.net/blog/template/page/how-to-naturally-terminate-a-pregnancy.aspx">longrangesystems.net</a> natural ways to terminate early pregnancy</div>
gFrick has the same issue and hackers added this type of div at end of all nVarchar(Max) columns content of all tables
and as i describe on above post it was from other ASP site on which hacker did it using sql injection that we fixed on ASP site that time.
But on nopCommerce i think its not possible.
do you have any other site that using same database as gFrick case ??