Malware Bytes error on updates and website

[wizzzzard]

Hi everyone, I am hoping someone can point me in the right direction here before this PC get a full re-prep.

We have just removed a nasty fake ware infection on a desktop running XP SP3, we used Malwarebytes, AVG and Combofix.

The PC now appears infection free (notice 'appears') however we are experiencing a bizarre after effect.....

Firstly we cannot access malwarebytes.org from this PC, 'page cannot be displayed' and when we try to download superantispyware we also get the same message.

Secondly, when we attempt to update MWB we get a 732 error (12007,0).

Apart from that, the PC can access other sites (both http and https) without issue.

I have tried the usual suspects, winsock, flushdns, reset all windows firewall and internet setting to default, checked for proxys, reinstalled Malwarebytes.

I also have access to 2 Internet sources in my shop and both exhibit the same issue, however other PC's on my network seem a.o.k.

any advice would be greatly received.

Many thanks

merlin@apex

[mountaintree16]

Hi wizzzzard, and welcome to the forums here at Malwarebytes.org

You shouldn't run Combofix unless you either know exactly what you are doing or are being guided by an expert to use it, so hopefully one of those two things was at work when you used Combofix

At any rate, the malware probably damaged your settings for updates to occur. Please see if if the following helps you to restore it. If not, you may still be infected and will need to visit the malware removal forum.

As a side note, when replying, please use the "ADD REPLY" button at the bottom of the page. Thank you

Please do the following to see if it corrects it:

Step 1: Verify Internet Connectivity of Internet Explorer:

Backup the Registry:

Modifying the Registry can create unforeseen problems, so it always wise to create a backup before doing so.

• Please download ERUNT from here
  
• ERUNT (Emergency Recovery Utility NT) is a free program that allows you to keep a complete backup of your registry and restore it when needed.
  
• Double click on erunt-setup.exe to Install ERUNT by following the prompts.
  
• Use the default install settings but say NO to the portion that asks you to add ERUNT to the Start-Up folder. You can enable this option later if you wish.
  
• Start ERUNT either by double clicking on the desktop icon or choosing to start the program at the end of the setup process.
  
• Choose a location for the backup.
  
  • Note: the default location is C:\Windows\ERDNT which is acceptable.
    

  [*]Make sure that at least the first two check boxes are selected.

  [*]Click on OK

  [*]Then click on YES to create the folder.

Note: if it is necessary to restore the registry, open the backup folder and start ERDNT.exe

Once you've done your backup, please do the following:

• Click on Start and select Run
  
• In the Run box copy and paste the text in the following code box exactly as written and press Enter or click on OK:

  REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v GlobalUserOffline /t REG_DWORD /d 0 /f

  
  

• Try updating again and if it does not work then please proceed to Step 2
  

Step 2: Verify Your Internet Connection Settings:

• Open Internet Explorer
  
  • Note: It MUST be Internet Explorer, not Firefox, Opera, Chrome or any other internet browser
    

  [*]Click on Tools at the top and select Internet Options

  • Note: If you do not see Tools, press the Alt key on your keyboard and it will show up
    

  [*]Click on the Connections tab

  [*]Click on the LAN settings button

  [*]Under Automatic configuration make sure that the box next to Automatically detect settings is checked, if it is not, then click the box next to it to check it

  [*]Under Proxy server make sure that the box next to Use a proxy server for your LAN (These settings will not apply to dial-up or VPN connections). is not checked and if it is, click the box next to it to uncheck it

  [*]Click on the OK button to close the Local Area Network (LAN) Settings window

  [*]Click on the OK button to close the Internet Options window

  [*]Try updating Malwarebytes' Anti-Malware again to see if it now works correctly

Now try updating Malwarebytes' Anti-Malware once more and if it does not work then please proceed to Step 3

Step 3: Exclude Malwarebytes' Anti-Malware's Files and Folders From Other Active Security Programs:

For Windows XP:

• C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
  
• C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
  
• C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
  
• C:\Program Files\Malwarebytes' Anti-Malware\zlib.dll
  
• C:\Program Files\Malwarebytes' Anti-Malware\mbam.dll
  
• C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll
  
• C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref
  
• C:\Windows\System32\drivers\mbam.sys
  
• C:\Windows\System32\drivers\mbamswissarmy.sys
  

For Windows Vista or Windows 7:

• C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
  
• C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
  
• C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
  
• C:\Program Files\Malwarebytes' Anti-Malware\zlib.dll
  
• C:\Program Files\Malwarebytes' Anti-Malware\mbam.dll
  
• C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll
  
• C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref
  
• C:\Windows\System32\drivers\mbam.sys
  
• C:\Windows\System32\drivers\mbamswissarmy.sys
  

For 64 bit versions of Windows Vista or Windows 7:

• C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
  
• C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
  
• C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
  
• C:\Program Files (x86)\Malwarebytes' Anti-Malware\zlib.dll
  
• C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.dll
  
• C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamext.dll
  
• C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref
  
• C:\Windows\System32\drivers\mbam.sys
  
• C:\Windows\SysWoW64\drivers\mbamswissarmy.sys
  

Note: If using a software firewall besides the built in Windows Firewall you'll need to exclude them from it as well

The FAQ contains examples of setting file exclusions for some known AV products.

[noknojon]

After you follow the advice from mountaintree16 and still have a problem try this -

If you're using a wireless connection, have you tried a direct connection with a cable to see if that changes the symptoms?

If these are both connected by a wireless modem then try a direct Ethernet connection for one of these computers - M/soft error (12007) -

If you think there may still be hidden infections I have left directions to follow -

As we don't work on Malware removal or diagnostics in the general forums please follow the advice below if you wish us to look further

Please print out, read, and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someone has replied to your post - Note our volunteer experts are very busy so it may be 3-5 days for a response -

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org

Thank you -

[wizzzzard]

Many thanks for your help and replies, I may not have made this clear from my post but I run my own IT consultancy and have been doing this for nearly 20 years.

The problem was with a Hijackthis entry I missed, as soon as that proxy was removed everything was hunky dory, but again thanks for your help anyway.

Merlin@apex

[mountaintree16]

I'm glad that things worked out for you!

I hope to be very computer smart one day too