error updating 12007

[zanepro]

I can't get it to update on two computers, both computers had the same virus. I have tried pretty much all the reccomended processes I saw on the forum.

reinstallng malwarebytes, disabling firewall and virus protection, the internet options thing, etc etc.

the error I get is:

an error has occurred, please report this error to our support team

MBAM_ERROR_UPDATING (12007,0,winhttpsendrequest

I have tried several step by step processes reccomended on this site from other posts but nothing seems to work.

[zanepro]

Also, just to add the virus on both computers was security suite...thanks

[Firefox]

hello and

do you connect to the internet using a router?

also just to note:

Security Suite is known to modify the following settings (as displayed by HijackThis)

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:6522

[zanepro]

hello and

do you connect to the internet using a router?

also just to note:

Security Suite is known to modify the following settings (as displayed by HijackThis)

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:6522

we have a wireless router

[Firefox]

Here are some steps to diagnose update issues:

Step 1

Click on

this link

and let me know what it says. It should be just a 4-digit number in the upper-left corner.

Step 2

Please download and run the traceroute utility at

this link

. It will run a traceroute to our update servers to see if it can find the connection issue, and then it will write it to a log, and open that log in Notepad when it is done. Please either save the log as a Text File and then attach it to a reply, or copy and paste it into a reply, and I will forward it on to our server guy.

Note that it may take several minutes to run, and it may look like it is not doing anything for a few minutes. Normally it takes longer when there are errors that it has to log, but it's rare for it to go more than 10 minutes.

Step 3

Please download TCPView from Microsoft at

this link

.

This utility will monitor everything that is accessing the Internet or your local network. All you have to do is run TCPView, and then run Malwarebytes' Anti-Malware and start the update. Watch TCPView to see if mbam.exe shows up in the list. It will be pretty obvious, because it highlights it in green.

I need to know what "Remote Address" Malwarebytes' Anti-Malware is trying to connect to. Once it shows up in the list, you can right-click on the line for mbam.exe, and select 'Copy' in order to paste it into a reply. It will tell me what I need to know. Below is an example of what the line you are looking for will look like inside the following code box:

mbam.exe:3656 TCP vista-x64:52135 cdn-208-111-168-7.ord.llnw.net:http ESTABLISHED

[zanepro]

Here are some steps to diagnose update issues:

Step 1

Click on

this link

and let me know what it says. It should be just a 4-digit number in the upper-left corner.

Step 2

Please download and run the traceroute utility at

this link

. It will run a traceroute to our update servers to see if it can find the connection issue, and then it will write it to a log, and open that log in Notepad when it is done. Please either save the log as a Text File and then attach it to a reply, or copy and paste it into a reply, and I will forward it on to our server guy.

Note that it may take several minutes to run, and it may look like it is not doing anything for a few minutes. Normally it takes longer when there are errors that it has to log, but it's rare for it to go more than 10 minutes.

Step 3

Please download TCPView from Microsoft at

this link

.

This utility will monitor everything that is accessing the Internet or your local network. All you have to do is run TCPView, and then run Malwarebytes' Anti-Malware and start the update. Watch TCPView to see if mbam.exe shows up in the list. It will be pretty obvious, because it highlights it in green.

I need to know what "Remote Address" Malwarebytes' Anti-Malware is trying to connect to. Once it shows up in the list, you can right-click on the line for mbam.exe, and select 'Copy' in order to paste it into a reply. It will tell me what I need to know. Below is an example of what the line you are looking for will look like inside the following code box:

mbam.exe:3656 TCP vista-x64:52135 cdn-208-111-168-7.ord.llnw.net:http ESTABLISHED

thanks, I clicked the first link and it gave me the "problem loading page"

I ran the second link and here is the notepad log:

Traceroute Malwarebytes CDN version 1.5

Mon 09/06/2010

9:28:49.50

Phase #1

Tracerouting: data-cdn.mbamupdates.com

Unable to resolve target system name data-cdn.mbamupdates.com.

DNS Info

Server: UnKnown

Address: 192.168.2.1

============================================================

Phase #2

Tracerouting: llnw.data-cdn.mbamupdates.com

Unable to resolve target system name llnw.data-cdn.mbamupdates.com.

DNS Info

Server: UnKnown

Address: 192.168.2.1

============================================================

Phase #3

Tracerouting: edge.data-cdn.mbamupdates.com

Unable to resolve target system name edge.data-cdn.mbamupdates.com.

DNS Info

Server: UnKnown

Address: 192.168.2.1

============================================================

Finished at: 9:28:53.21

[Firefox]

That traceroute log shows a DNS issue, and it's possible that your DNS settings have been hijacked. If you connect to the Internet through a router, then I would highly recommend that you reset it to it's factory default settings by holding the 'Reset' button on the back of the router until the power light starts blinking. This will clear all of the settings, including DNS settings, and reset them to the factory defaults, which should resolve the issue.

Please note that you will need to set the router back up after performing this reset.

Also, if you know how to check the router's DNS settings manually, then you can change the DNS settings in the router to resolve the issue without resetting it.

[zanepro]

mbam doesn't show up, when I open it and click update, svchost.exe lights in green then after that avastsvc.exe and svchost.exe lights in red. There are multiple listings for everything that's runnng.

[zanepro]

That traceroute log shows a DNS issue, and it's possible that your DNS settings have been hijacked. If you connect to the Internet through a router, then I would highly recommend that you reset it to it's factory default settings by holding the 'Reset' button on the back of the router until the power light starts blinking. This will clear all of the settings, including DNS settings, and reset them to the factory defaults, which should resolve the issue.

Please note that you will need to set the router back up after performing this reset.

Also, if you know how to check the router's DNS settings manually, then you can change the DNS settings in the router to resolve the issue without resetting it.

Thank You very much for helping! I will try this and post what happens.

[Firefox]

In that case, then you may still be infected.....

Please read the following so that you can begin the cleaning process:

As we don't deal with malware removal in the General Malwarebytes' Anti-Malware Forum, you need to start a topic in the Malware Removal forum so a qualified helper can help you fix any malware related problems/infections you may have.

• Please read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.
  
• After posting your new post, make sure under options, you select Track this topic and choose Immediate Email Notification, so that you're alerted when someone has replied to your post.
  
• One of the expert helpers there will give you one-on-one assistance when one becomes available.
  
• Please refrain from making any further changes to your computer (Install/Uninstall programs, use special fix tools, delete files, edit the registry, etc...) unless advised by a malware removal helper. Doing so can result in system changes which may hinder the attempts by a helper to clean your machine.
  

NOTE: Please DO NOT post back to (bump) your topic within the first 48 hours.

Replying to your own posts changes the post count and helpers are looking for topics with zero replies. If you reply to your own post helpers may think that you're already being helped and thus overlook your post.

• • If there is no reply from any experts after 48 hours, you can reply to the topic, asking for help again.
    Or
    
  • You may send a Private Message to a Moderator asking for assistance.
    

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org or here.

Please be patient, someone will assist you as soon as it is possible.

PS: Please use the "ADDREPLY" button instead of other ones when you start replying.