We were hit with the Nimda virus. We shut down the network, fixed the workstations last night, ran the symantec antivirus on workstations this morning and did full scan. We have been cleaning up our servers by runing norton antivirus and manually deleting the .eml, nws file extension. However once we clean a partiton out and move to another one when we go back to the original partition, there are more files with the .eml extension. Norton is also finding infected files and deleting them butI am not sure if this is triggering a reocurrance or if there are other files we are missing in the clean up process. The only thing I noticed we are not doing yet is rebooting the computer and then running the scan again. We are doing this now. Any advice would be helpful
