Okay, so I ran these three programs: VirtumundoBeGone; FixVundo; and HiJack This.

Here are the files consecutively (I ran the first one twice, so I'll put both files on):

[01/31/2006, 16:08:27] - VirtumundoBeGone v1.5 ( "C:\Documents and Settings\Barbara\Desktop\VirtumundoBeGone.exe" )
[01/31/2006, 16:08:30] - User choose NOT to continue. Exiting...

[01/31/2006, 16:41:40] - VirtumundoBeGone v1.5 ( "C:\Documents and Settings\Barbara\Desktop\VirtumundoBeGone.exe" )
[01/31/2006, 16:41:43] - Detected System Information:
[01/31/2006, 16:41:43] -  Windows Version: 5.1.2600, Service Pack 2
[01/31/2006, 16:41:43] -  Current Username: Barbara (Admin)
[01/31/2006, 16:41:43] -  Windows is in NORMAL mode.
[01/31/2006, 16:41:43] - Searching for Browser Helper Objects:
[01/31/2006, 16:41:43] -  BHO 1: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (AcroIEHlprObj Class)
[01/31/2006, 16:41:43] -  BHO 2: {4D25F921-B9FE-4682-BF72-8AB8210D6D75} ()
[01/31/2006, 16:41:43] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/31/2006, 16:41:43] -  Checking for HKLM\...\Winlogon\Notify\deSrcAs
[01/31/2006, 16:41:43] -  Key not found: HKLM\...\Winlogon\Notify\deSrcAs, continuing.
[01/31/2006, 16:41:43] -  BHO 3: {549B5CA7-4A86-11D7-A4DF-000874180BB3} ()
[01/31/2006, 16:41:43] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/31/2006, 16:41:43] -  No filename found. Continuing.
[01/31/2006, 16:41:43] -  BHO 4: {5CA3D70E-1895-11CF-8E15-001234567890} (DriveLetterAccess)
[01/31/2006, 16:41:43] -  BHO 5: {7A1A109F-58B3-414B-9829-5F4D9BE5FEDE} (ATLDistrib Object)
[01/31/2006, 16:41:43] - ALERT: Found ATLDistrib Object!
[01/31/2006, 16:41:43] -  BHO 6: {BDF3E430-B101-42AD-A544-FADC6B084872} (CNavExtBho Class)
[01/31/2006, 16:41:43] -  BHO 7: {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} ()
[01/31/2006, 16:41:43] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/31/2006, 16:41:43] -  No filename found. Continuing.
[01/31/2006, 16:41:43] - Finished Searching Browser Helper Objects
[01/31/2006, 16:41:43] - *** Detected ATLDistrib Object
[01/31/2006, 16:41:43] - Trying to remove ATLDistrib Object...
[01/31/2006, 16:41:44] -    Terminating Process: IEXPLORE.EXE
[01/31/2006, 16:41:44] -    Terminating Process: RUNDLL32.EXE
[01/31/2006, 16:41:44] -    Disabling Automatic Shell Restart
[01/31/2006, 16:41:44] -    Terminating Process: EXPLORER.EXE
[01/31/2006, 16:41:44] -    Suspending the NT Session Manager System Service
[01/31/2006, 16:41:45] -    Terminating Windows NT Logon/Logoff Manager
[01/31/2006, 16:41:45] -    Re-enabling Automatic Shell Restart
[01/31/2006, 16:41:45] -   File to disable: C:\WINDOWS\system32\pmnll.dll
[01/31/2006, 16:41:45] -  Renaming C:\WINDOWS\system32\pmnll.dll -> C:\WINDOWS\system32\pmnll.dll.vir
[01/31/2006, 16:41:46] -  File successfully renamed!
[01/31/2006, 16:41:46] -   Removing HKLM\...\Browser Helper Objects\{7A1A109F-58B3-414B-9829-5F4D9BE5FEDE}
[01/31/2006, 16:41:46] -   Removing HKCR\CLSID\{7A1A109F-58B3-414B-9829-5F4D9BE5FEDE}
[01/31/2006, 16:41:46] -   Adding Kill Bit for ActiveX for GUID: {7A1A109F-58B3-414B-9829-5F4D9BE5FEDE}
[01/31/2006, 16:41:46] -   Deleting ATLEvents/MSEvents Registry entries
[01/31/2006, 16:41:46] -   Removing HKLM\...\Winlogon\Notify\pmnll
[01/31/2006, 16:41:46] - Searching for Browser Helper Objects:
[01/31/2006, 16:41:46] -  BHO 1: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (AcroIEHlprObj Class)
[01/31/2006, 16:41:46] -  BHO 2: {4D25F921-B9FE-4682-BF72-8AB8210D6D75} ()
[01/31/2006, 16:41:46] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/31/2006, 16:41:46] -  Checking for HKLM\...\Winlogon\Notify\deSrcAs
[01/31/2006, 16:41:46] -  Key not found: HKLM\...\Winlogon\Notify\deSrcAs, continuing.
[01/31/2006, 16:41:46] -  BHO 3: {549B5CA7-4A86-11D7-A4DF-000874180BB3} ()
[01/31/2006, 16:41:46] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/31/2006, 16:41:46] -  No filename found. Continuing.
[01/31/2006, 16:41:46] -  BHO 4: {5CA3D70E-1895-11CF-8E15-001234567890} (DriveLetterAccess)
[01/31/2006, 16:41:46] -  BHO 5: {BDF3E430-B101-42AD-A544-FADC6B084872} (CNavExtBho Class)
[01/31/2006, 16:41:46] -  BHO 6: {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} ()
[01/31/2006, 16:41:46] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/31/2006, 16:41:46] -  No filename found. Continuing.
[01/31/2006, 16:41:46] - Finished Searching Browser Helper Objects
[01/31/2006, 16:41:46] - Finishing up...
[01/31/2006, 16:41:46] - A restart is needed.
[01/31/2006, 16:41:46] - Automatic Reboot on STOP Error is not set. User will have to manually restart.

[01/31/2006, 16:43:55] - VirtumundoBeGone v1.5 ( "C:\Documents and Settings\Barbara\Desktop\VirtumundoBeGone.exe" )
[01/31/2006, 16:43:58] - Detected System Information:
[01/31/2006, 16:43:58] -  Windows Version: 5.1.2600, Service Pack 2
[01/31/2006, 16:43:58] -  Current Username: Barbara (Admin)
[01/31/2006, 16:43:58] -  Windows is in NORMAL mode.
[01/31/2006, 16:43:58] - Searching for Browser Helper Objects:
[01/31/2006, 16:43:58] -  BHO 1: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (AcroIEHlprObj Class)
[01/31/2006, 16:43:58] -  BHO 2: {4D25F921-B9FE-4682-BF72-8AB8210D6D75} ()
[01/31/2006, 16:43:58] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/31/2006, 16:43:58] -  Checking for HKLM\...\Winlogon\Notify\deSrcAs
[01/31/2006, 16:43:58] -  Key not found: HKLM\...\Winlogon\Notify\deSrcAs, continuing.
[01/31/2006, 16:43:58] -  BHO 3: {549B5CA7-4A86-11D7-A4DF-000874180BB3} ()
[01/31/2006, 16:43:58] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/31/2006, 16:43:58] -  No filename found. Continuing.
[01/31/2006, 16:43:58] -  BHO 4: {5CA3D70E-1895-11CF-8E15-001234567890} (DriveLetterAccess)
[01/31/2006, 16:43:58] -  BHO 5: {BDF3E430-B101-42AD-A544-FADC6B084872} (CNavExtBho Class)
[01/31/2006, 16:43:58] -  BHO 6: {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} ()
[01/31/2006, 16:43:58] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/31/2006, 16:43:59] -  No filename found. Continuing.
[01/31/2006, 16:43:59] - Finished Searching Browser Helper Objects
[01/31/2006, 16:43:59] - Finishing up...
[01/31/2006, 16:43:59] - Nothing found! Exiting...

yes, please generate a brand-new, up-to-date HJT log, and post it, REPLYing to this thread.    It will allow me to confirm you've implemented the changes i've suggested.

after that, another helper will [hopefully] check the log for additional problems [or give you the "all clear", if that's the case for you].

Log is clean.  Need to update  your java tho and remove the older versions.

Ron

You can delete any programs we had you install but leave Hijackthis for now.  You can also run Hijackthis, View the List of Backups and Delete All.  If we used killbox its backup files can be removed now too.  Run Killbox and select File, Cleanup, Delete All Backups.  If you have an antivirus, check its quarantined files and delete any it had found.

You should also definitely toggle System Restore Off and then back On.

Following site has very clear instructions for turning it off.  To turn it back on you just repeat the instructions but uncheck the box where it says to Turn Off System Restore on all Drives.

http://www.f-secure.com/v-descs/sfc_dis1.shtml

The reason we do this is to remove any archived copies of the infection from System Restore so that if you have to use System Restore to fix a problem you won't accidentally reinfect your system.  The next link explains how to use System Restore to go back in time if you hit a bad site or get infected.

http://www.microsoft.com/windowsxp/using/helpandsupport/learnmore/systemrestore.mspx

One way to make an infection more obvious is to check everything in your current HijackThis and Add to Ignore List then set up Hijackthis to run at boot and to show you if it finds anything new.  You do this by None of the Above Just start the program, Config (Main) and then check the box in front of Run Hiajckthis at startup and show it when items are found.  OK.  Then if Hijackthis opens after a boot it will show you any new programs that have been added.  You can then decide if you want to keep them or not.  If in doubt you can google for the .exe or .dll file at the end of the entry and see if what other people think of it.

To avoid going to a bad site you might want to install IE-SpyAd and SpywareBlaster and make the other changes recommended at:.
http://www.mvps.org/winhelp2002/restricted.htm
I used to recommend Spybot's Immunize system but have recently learned it is not as good as the one at:
http://www.mvps.org/winhelp2002/hosts.htm

Always run a firewall.  The one in XP SP2 is pretty good tho I think the free one from Zone Alarm is better.

http://www.zonelabs.com/store/content/company/products/trial_zaFamily/trial_zaFamily.jsp?lid=home_freedownloads

Turn on Autoupdates so you always get the latest patches from Windows.

Never hurts to do one of the free on line scans from Panda or Trend.  They take a while but are pretty good.
www.pandasoftware.com/activescan/activescan.asp?
http://housecall.trendmicro.com/

I like to run Spybot S&D. 
http://www.safer-networking.org/en/download/index.html
Also like to run AdAware once in a while. 
http://www.lavasoftusa.com/software/adaware/

Get the latest version of
Java:
http://www.java.com/en/download/windows_automatic.jsp

 Make sure you have removed any older versions of Java or JRE  with Control Panel, Add/Remove Programs.  Updates do not remove the older versions which have exploitable flaws.

If you are not running the latest version of Adobe you should consider updating.  There are reports of a loophole for hackers in pre 7.03 versions.
As an alternative you can dump adobe completely and use fox-it instead:
http://www.foxitsoftware.com/pdf/rd_intro.php

Ron