I recently got F-Nimda AND Virtumonde at the same time. It was a mess. My start bar and icons were missing and I think I fixed that by editing the registry. I kept receiving alerts from AntiVir that it detected TR/Vundo.Gen on my system in the directory C:\WINDOWS\System32\ and then it would have a .dll file that appeared to be generated randomly by the trojan, as it would have a different name every time (most recently css4.dll). So, I updated and ran Ad-Aware, Spybot, CCcleaner, and did a scan with AntiVir. I fixed or deleted all of the detections from all programs and got rid of a bunch of unnecessary files (temp files, etc.). I have no idea if it worked or not. I realized I cannot change my desktop background in Control Panel>Display and I also am unable to browse for a file to attach to an e-mail in Hotmail (I click the "Browse" button and nothing happens) I also can not "Save picture as..." in Firefox. How do I fix these?
Sure enough, right after I hit "post" I got an alert that a virus was found in C:\Documents and Settings\Allen\Temporary Internet Files\Content.IE5\LBIH12U4\css4 Is the Trojan horse TR/Vundo.Gen
Also, I got one at the same time that said it was in C:\WINDOWS\system32\pmnll.dll.......GRRRRRRRR!!!!!
Edited by wolverene13, 24 February 2008 - 05:58 PM.