I downloaded everything in my website folder today to do some updating, and tonight when my virus scan was doing a routine check it found the NIMDA.A virus. The infected file was called RICHED.DLL or something like that. I have deleted it from my computer and will soon (in the next 5 minutes) delete it from my user account.
Somebody needs to sweep the server, and you guys with usersites need to check for that file (it just randomly appeared)