Solved Windows 7 IE redirect Virus after cleanup attempts/updates

[Broni]

The log says "No action taken".

Re-run it, FIX all issues and post new log.

 

[jeffleeismyhero]

This is the malwarebytes log. There still seems to be something creeping around. Subsequent scans show that the virus doesn't get deleted on reboot.


Malwarebytes Anti-Malware 1.60.1.1000
www.malwarebytes.org

Database version: v2012.02.23.01

Windows 7 x86 NTFS
Internet Explorer 8.0.7600.16385
Hess :: HESS-PC [administrator]

2/22/2012 7:47:04 PM
mbam-log-2012-02-22 (19-47-04).txt

Scan type: Full scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM | P2P
Scan options disabled:
Objects scanned: 289031
Time elapsed: 46 minute(s), 18 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 1
C:\Windows\System32\APLMp50.dll (RootKit.0Access.H) -> Delete on reboot.

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 1
C:\Windows\System32\APLMp50.dll (RootKit.0Access.H) -> Delete on reboot.

(end)

 

[Broni]

It may be false positive.

Open Windows Explorer. Go Tools>Folder Options>View tab, put a checkmark next to Show hidden files, and folders, UN-check Hide protected operating system files.
NOTE. Make sure to reverse the above changes, when done with this step.
Upload following files to http://www.virustotal.com/ for security check:
- C:\Windows\System32\APLMp50.dll
IMPORTANT! If the file is listed as already analyzed, click on Reanalyse file now button.
Post scan results.

 

[jeffleeismyhero]

After running MalwareBytes and Avast (I removed AVG) it seems to have removed whatever remaining files there were.

Thanks a lot for the help. Everything seems to be running much better now!

 

[Broni]

Cool beans