Some hints on nimda, after running norton AV or remove utility. Do the following search your HD for *.emf files. The only place you should see them is in your MS shared directory And MS office directories, and there is a couple of templates with that extension. Any of these file found in other directories should be deleted. Second search your temorary internet file folders for *.vbs files also delete any of these.