I have an ASP site, with a folder called cgi-bin, where the access database is. This morning, I found all data missing from the database and the "users" table containing the admin user name and password for editing had been cahnged to user "nimda" and a new password. Nobody else had access to my user name and password so how could they get in there.

Also what makes me suspicious that the server was hacked and not someone that jsut got hold of my username and password for the admin page, is that there was a file called "mydomain.com" in the cgi-bin folder. It appears to be an application but I'm too afraid to run it.

I can't find anything in the web logs. Is there a seperate log for ASP that I can look at ? any ideas what's going on ?