axkazex93

HTTP request failed while trying to update Malwarebytes 3.0.6.1469

Recommended Posts

Hey! Until today I was running MB just fine, updating just fine, but now when I try to update the database nothing happened. I ran a threat scan, nothing have been found. So I scanned with Windows Defender as well, nothing. So I went to take a look at the logs and found out that the program is receiving a http status code 400. It is weird because until yesterday (the last time I ran an update) it was running just fine. I restarted the computer and it didn't worked as well

Here is the update logs: (I tried to upload the entire log file here but I think my connection is too bad it is never finishing, so I just copied the logs referred to the update process, I may try to upload the full log file later... if it is needed)

03/23/17	" 08:54:16.107"	3105875	0a70	21a0	INFO	UpdateControllerImpl	mb::updatecontrollerimpl::CUpdateControllerImpl::ValidateDBManifest	"UpdateControllerImplHelper.cpp"	3382	"Signature successfully validated"
03/23/17	" 08:54:16.501"	3106265	0a70	21a0	INFO	UpdateControllerImpl	mb::updatecontrollerimpl::CUpdateControllerImpl::ValidateDBManifest	"UpdateControllerImplHelper.cpp"	3386	"DB manifest successfully validated"
03/23/17	" 08:54:16.501"	3106265	0a70	21a0	INFO	UpdateControllerImpl	mb::updatecontrollerimpl::CUpdateControllerImpl::CheckDbManifest	"UpdateControllerImplHelper.cpp"	3507	"Validated DB manifest - success"
03/23/17	" 08:54:16.501"	3106265	0a70	21a0	INFO	UpdateControllerImpl	mb::updatecontrollerimpl::CUpdateControllerImpl::Update	"UpdateControllerImplHelper.cpp"	362	"Update - Starting check for updates"
03/23/17	" 08:54:16.501"	3106265	0a70	0d74	INFO	UpdateControllerImpl	mb::updatecontrollerimpl::CUpdateControllerImpl::DoUpdate	"UpdateControllerImplHelper.cpp"	452	"DoUpdate - Starting check for updates (manual)"
03/23/17	" 08:54:16.501"	3106265	0a70	0d74	INFO	UpdateControllerImpl	mb::updatecontrollerimpl::CUpdateControllerImpl::DoUpdate	"UpdateControllerImplHelper.cpp"	454	"Checking for: Installer=[No], SDK/Ctlr=[No], DB/CLS=[Yes]"
03/23/17	" 08:54:16.503"	3106265	0a70	0d74	INFO	UpdateControllerImpl	mb::updatecontrollerimpl::CUpdateControllerImpl::GetInstalledPkgVersions	"UpdateControllerImplHelper.cpp"	956	"Installer package --> [mbam-c.installer.consumer], current version: [3.0.6]"
03/23/17	" 08:54:16.503"	3106265	0a70	0d74	INFO	UpdateControllerImpl	mb::updatecontrollerimpl::CUpdateControllerImpl::GetInstalledPkgVersions	"UpdateControllerImplHelper.cpp"	969	"SDK/Controller package --> [mbam-c.ctlr.64bit], current version: [1.0.75]"
03/23/17	" 08:54:16.503"	3106265	0a70	0d74	INFO	UpdateControllerImpl	mb::updatecontrollerimpl::CUpdateControllerImpl::GetInstalledPkgVersions	"UpdateControllerImplHelper.cpp"	985	"DB/ClsEng package --> [mbam-c.dbcls.64bit], current version: [1.0.1550]"
03/23/17	" 08:54:19.032"	3108796	0a70	0d74	ERROR	HttpConnection	mb::common::net::HttpConnection::SendRequest	"HttpConnection.cpp"	229	"HTTP request failed, status code: 400"
03/23/17	" 08:54:19.032"	3108796	0a70	0d74	ERROR	UpdateControllerImpl	mb::updatecontrollerimpl::CUpdateControllerImpl::CheckForUpdates	"UpdateControllerImplHelper.cpp"	655	"HTTP status code: 400"
03/23/17	" 08:54:19.032"	3108796	0a70	0d74	ERROR	UpdateControllerImpl	mb::updatecontrollerimpl::CUpdateControllerImpl::CheckForUpdates	"UpdateControllerImplHelper.cpp"	661	"Err_ResponseStatus:  "
03/23/17	" 08:54:19.032"	3108796	0a70	0d74	ERROR	UpdateControllerImpl	mb::updatecontrollerimpl::CUpdateControllerImpl::CheckForUpdates	"UpdateControllerImplHelper.cpp"	662	"Err_ResponseMessage: "
03/23/17	" 08:54:19.034"	3108796	0a70	0d74	INFO	UpdateControllerImpl	mb::updatecontrollerimpl::CUpdateControllerImpl::DoUpdate	"UpdateControllerImplHelper.cpp"	484	"Checked for updates - no updates available"
03/23/17	" 08:54:19.034"	3108796	0a70	0d74	INFO	UpdateControllerImpl	mb::updatecontrollerimpl::CUpdateControllerImpl::DoUpdate	"UpdateControllerImplHelper.cpp"	495	"Update check is complete."

 

I'm also attaching the FRST and Addition logs as well

Logs.zip

Share this post


Link to post
Share on other sites

I did a clean reinstall, using mbam clean, restarting and then installing again, nothing. It keeps refusing to update and getting the same error in the log.
I managed to get the mbam logs, here they are:

mbamlogs.zip

Share this post


Link to post
Share on other sites

Hi! I checked again, it is still not working. I restarted and reinstalled a couple of times, doesn't help either.

I'm not sure if it will be helpful, but I opened the tcpview to check if the program was really connecting to the server or not, and noticed that it is, so probably it is still a problem on your servers maybe? 

tcp.jpg

Share this post


Link to post
Share on other sites

@dcollins Yup I'm still having issues with it. Same HTTP 400 error.

03/26/17	" 02:33:08.277"	99640750	0ba8	1590	INFO	UpdateControllerImpl	mb::updatecontrollerimpl::CUpdateControllerImpl::ValidateDBManifest	"UpdateControllerImplHelper.cpp"	3382	"Signature successfully validated"
03/26/17	" 02:33:08.665"	99641140	0ba8	1590	INFO	UpdateControllerImpl	mb::updatecontrollerimpl::CUpdateControllerImpl::ValidateDBManifest	"UpdateControllerImplHelper.cpp"	3386	"DB manifest successfully validated"
03/26/17	" 02:33:08.665"	99641140	0ba8	1590	INFO	UpdateControllerImpl	mb::updatecontrollerimpl::CUpdateControllerImpl::CheckDbManifest	"UpdateControllerImplHelper.cpp"	3507	"Validated DB manifest - success"
03/26/17	" 02:33:08.665"	99641140	0ba8	1590	INFO	UpdateControllerImpl	mb::updatecontrollerimpl::CUpdateControllerImpl::Update	"UpdateControllerImplHelper.cpp"	362	"Update - Starting check for updates"
03/26/17	" 02:33:08.666"	99641140	0ba8	0ec8	INFO	UpdateControllerImpl	mb::updatecontrollerimpl::CUpdateControllerImpl::DoUpdate	"UpdateControllerImplHelper.cpp"	452	"DoUpdate - Starting check for updates (manual)"
03/26/17	" 02:33:08.666"	99641140	0ba8	0ec8	INFO	UpdateControllerImpl	mb::updatecontrollerimpl::CUpdateControllerImpl::DoUpdate	"UpdateControllerImplHelper.cpp"	454	"Checking for: Installer=[No], SDK/Ctlr=[No], DB/CLS=[Yes]"
03/26/17	" 02:33:08.667"	99641140	0ba8	0ec8	INFO	UpdateControllerImpl	mb::updatecontrollerimpl::CUpdateControllerImpl::GetInstalledPkgVersions	"UpdateControllerImplHelper.cpp"	956	"Installer package --> [mbam-c.installer.consumer], current version: [3.0.6]"
03/26/17	" 02:33:08.667"	99641140	0ba8	0ec8	INFO	UpdateControllerImpl	mb::updatecontrollerimpl::CUpdateControllerImpl::GetInstalledPkgVersions	"UpdateControllerImplHelper.cpp"	969	"SDK/Controller package --> [mbam-c.ctlr.64bit], current version: [1.0.75]"
03/26/17	" 02:33:08.667"	99641140	0ba8	0ec8	INFO	UpdateControllerImpl	mb::updatecontrollerimpl::CUpdateControllerImpl::GetInstalledPkgVersions	"UpdateControllerImplHelper.cpp"	985	"DB/ClsEng package --> [mbam-c.dbcls.64bit], current version: [1.0.1394]"
03/26/17	" 02:33:10.136"	99642609	0ba8	0ec8	ERROR	HttpConnection	mb::common::net::HttpConnection::SendRequest	"HttpConnection.cpp"	229	"HTTP request failed, status code: 400"
03/26/17	" 02:33:10.136"	99642609	0ba8	0ec8	ERROR	UpdateControllerImpl	mb::updatecontrollerimpl::CUpdateControllerImpl::CheckForUpdates	"UpdateControllerImplHelper.cpp"	655	"HTTP status code: 400"
03/26/17	" 02:33:10.136"	99642609	0ba8	0ec8	ERROR	UpdateControllerImpl	mb::updatecontrollerimpl::CUpdateControllerImpl::CheckForUpdates	"UpdateControllerImplHelper.cpp"	661	"Err_ResponseStatus:  "
03/26/17	" 02:33:10.136"	99642609	0ba8	0ec8	ERROR	UpdateControllerImpl	mb::updatecontrollerimpl::CUpdateControllerImpl::CheckForUpdates	"UpdateControllerImplHelper.cpp"	662	"Err_ResponseMessage: "
03/26/17	" 02:33:10.137"	99642609	0ba8	0ec8	INFO	UpdateControllerImpl	mb::updatecontrollerimpl::CUpdateControllerImpl::DoUpdate	"UpdateControllerImplHelper.cpp"	484	"Checked for updates - no updates available"
03/26/17	" 02:33:10.137"	99642609	0ba8	0ec8	INFO	UpdateControllerImpl	mb::updatecontrollerimpl::CUpdateControllerImpl::DoUpdate	"UpdateControllerImplHelper.cpp"	495	"Update check is complete."

I also found out that resetting the hosts file could help but in my case, everything is the same.

Edited by axkazex93

Share this post


Link to post
Share on other sites

OK, thanks. Let's try a debug log and see if that gives us more information about your error. Just for kicks, do you mind using a clean HOSTS file during this test (https://support.microsoft.com/en-us/help/972034/how-can-i-reset-the-hosts-file-back-to-the-default)?

  1. Open up Malwarebytes
  2. Go to Settings -> Application
  3. Turn on Event Log Data
  4. Go to the Dashboard
  5. Click the Update button
  6. Wait until the progress bar goes away
  7. Go Settings -> Application
  8. Turn off Event Log Data
  9. Navigate to C:\ProgramData\Malwarebytes\MBAMService
    • Note that the ProgramData folder may be hidden. You'll need either turn on showing hidden files and folders or type the path manually
  10. Right click the logs folder and choose Send to -> Compressed (Zipped) folder
    • This will create a file on your desktop named logs.zip
  11. Upload the logs.zip file from your desktop in your reply

Share this post


Link to post
Share on other sites

Looks like you're missing your installation token for some reason. Let's try this then...

  1. Open up Malwarebytes
  2. Go to Settings -> Application
  3. Turn on Event Log Data
  4. Go to Settings -> My Account
  5. Wait 30 seconds
  6. Go Settings -> Application
  7. Turn off Event Log Data
  8. Navigate to C:\ProgramData\Malwarebytes\MBAMService
    • Note that the ProgramData folder may be hidden. You'll need either turn on showing hidden files and folders or type the path manually
  9. Right click the logs folder and choose Send to -> Compressed (Zipped) folder
    • This will create a file on your desktop named logs.zip
  10. Upload the logs.zip file from your desktop in your reply

Share this post


Link to post
Share on other sites

Hi! I THINK I managed to figured out what is wrong here.

Do your activation servers attach a installation token to a configuration when it tries to activate the software? I was wondering why Malwarebytes is not updating if the hosts file is clean. Then, I did a test: Hosts file modified vs Hosts file clean.

With the modified hosts file, the update component simply refuses to connect. See at first updating tries in the log. I tried with: localhost, localhost and random thirdy-party server, localhost and a malwarebytes' server, and then finally a clean hosts file. The first times I tried to run update, you can see in the logs that it simply doesn't connect. And then, in the last update I ran with clean hosts file, voila! It connected!

Also, I noticed that the it is the activation server that attributes an installation token, yes? Because, as you can see in the logs, the keystone was unable to retrieve the installation token, and it seems that the keystone component wasn't able to connect to the server either when the hosts file are modified, but after I cleaned up the hosts file, I guess it managed to get one because keystone stopped complaining in the logs about it.

 

MBAMSERVICE.LOG

Edited by axkazex93

Share this post


Link to post
Share on other sites

Yes, our keystone server is what provides an installation token. We tracking down why an edited HOSTS file could cause this issue.

Share this post


Link to post
Share on other sites
9 hours ago, Z3R0_OS said:

IT's working for me now it seems to be a problem on their side of the server

Yep! We addressed the issue in the following post:

 

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.