I'm still at work, waiting for one more scan of the server to complete. Yes, yes, someone in my company got the Nimda virus.
Yes, they gave it to lots of people, because they managed to infect one of the software distribution servers which is, yes, what the "do not access" message was about earlier.
Yes, Nimda writes to every shared drive it can find. Yes, the domain controller in our office needed a shared drive for one of its programs to be accessible. Yes, its disk was covered in .eml files. Yes, my boss was out of town, so I ended up handling the mess (the server is his - but I'm the best in the office at virus stuff, probably not even excluding him - I guessed the monster correctly even while he didn't believe it).
Good news: the server was not infected. It had a lot of junk files written to it, but since no one was using it, they were not run, and it did not manage to get into the Windows folders and set it up to run.
Bad news: the server has a 10-gig hard drive. And it was. Completely. Full.
I have been stripping (after unsharing the drive!) infected files by hand. Norton can detect them, but it doesn't seem to want to deal with getting rid of them. I, on the other hand, am quite happy to hit delete repeatedly (after checking with my boss - he doesn't even use Outlook - so the *.eml and *.nws files can go en masse, yay!).
I'm still at work. I should have eaten dinner half an hour ago, and I'm still at work. I should have left over an hour ago, and I'm still at work.
On the other hand, I really know I'm getting stuff done....
My own desktop and laptop were clean, never infected; several of our less tech-savvy folks, and their laptops, were out of the office today and thus Not My Problem. Lab? Clean. Backup DC? Clean. My employees' machines? Apparently clean, though I still need to scan one.
Need to check on a few more "person wasn't here" machines, but it's looking like I may get to go soon.
This is the sort of thing I hate to leave to greet someone in the morning, because sure as anything, they'll give it back to anyone they can.