[_m3]

The XML file for checking for the presence of Nimda using HFNetChk is
now tested. It has successfully discovered Nimda on all machines
which were infected. It has not falsely detected Nimda on any
machines.

It will *not*, however, discover Nimda files on machines which have
not been infected. It will also not detect any variant of Nimda (none
known so far), something which AntiVirus products **do very well**.

http://www.ntbugtraq.com/nimdachk.asp

will take you to the page to download the latest version of HFNetchk,
plus provide you with the details to run it against the TruSecure.XML
file that contains the Nimda checking.

If your web access has been restricted and want to run this code
locally, drop me an email and I will send you a zip containing all of
the components (hfnetchk.zip, trusecure.xml, and the instruction
page)