Error 12007 preventing updating. Please help :)

[IXIReaperIXI]

Hello, i recently downloaded malwarebyte's because i think i have a 'google redirect' virus. However i am stuck on version 4052 and cannot update. I run vista and use AVG and comodo firewall. Might be worth noting i reformatted my computer a week ago.

I have read the FAQs and tried pretty much everything i could think of. In my last attempt to salvage this program im posting here asking for help.

I will post any logs or info needed to solve this issue, i dont like it when something on my computer that should be working isnt, it bugs me

[Firefox]

Hello and

Being that you just formated your hard drive, it is possible that it may be ok, the issue may lay someplace else, lets try some simple trouble shooting first.

Did you enter exceptions from Malwarebytes in your Anti-virus software and Firewall?

Do you use a router for your internet connection? (it may have been hijacked) (resetting it back to factory default settings may help)

Here are some steps to diagnose update issues:

Step 1

Click on

this link

and let me know what it says. It should be just a 4-digit number in the upper-left corner.

Step 2

Please download and run the traceroute utility at

this link

. It will run a traceroute to our update servers to see if it can find the connection issue, and then it will write it to a log, and open that log in Notepad when it is done. Please either save the log as a Text File and then attach it to a reply, or copy and paste it into a reply, and I will forward it on to our server guy.

Note that it may take several minutes to run, and it may look like it is not doing anything for a few minutes. Normally it takes longer when there are errors that it has to log, but it's rare for it to go more than 10 minutes.

Step 3

Please download TCPView from Microsoft at

this link

.

This utility will monitor everything that is accessing the Internet or your local network. All you have to do is run TCPView, and then run Malwarebytes' Anti-Malware and start the update. Watch TCPView to see if mbam.exe shows up in the list. It will be pretty obvious, because it highlights it in green.

I need to know what "Remote Address" Malwarebytes' Anti-Malware is trying to connect to. Once it shows up in the list, you can right-click on the line for mbam.exe, and select 'Copy' in order to paste it into a reply. It will tell me what I need to know. Below is an example of what the line you are looking for will look like inside the following code box:

mbam.exe:3656 TCP vista-x64:52135 cdn-208-111-168-7.ord.llnw.net:http ESTABLISHED

[IXIReaperIXI]

Hello Firefox, thank you for assisting me so quickly

I have already entered exceptions into comodo and AVG, also including the exceptions in the system32 folder.

I do use a router, and after reading the FAQs i already reset it and went to internet options in IE and changed the LAN to acquire automatically

Step 1

Not working for me, says page cannot be opened.

Step 2

Traceroute Malwarebytes CDN version 1.5

Wed 09/01/2010

7:01:07.74

Phase #1

Tracerouting: data-cdn.mbamupdates.com

Unable to resolve target system name data-cdn.mbamupdates.com.

DNS Info

Server: UnKnown

Address: 213.109.68.247

============================================================

Phase #2

Tracerouting: llnw.data-cdn.mbamupdates.com

Unable to resolve target system name llnw.data-cdn.mbamupdates.com.

DNS Info

Server: UnKnown

Address: 213.109.68.247

============================================================

Phase #3

Tracerouting: edge.data-cdn.mbamupdates.com

Unable to resolve target system name edge.data-cdn.mbamupdates.com.

DNS Info

Server: UnKnown

Address: 213.109.68.247

============================================================

Finished at: 7:01:12.92

Step 3

Malwarebytes does not appear on the list.

When i press the update button in Malwarebytes it instantly opens up with the error not even trying to start a connection.

Lastly i believe my computer is compromised because i failed to upload vista service pack 2 until a few days ago, and SP1 earlier today. I keep getting redirected to some 'google-analytics.com thing.

Any help on this issue would be greatly appreciated

[Firefox]

it really looks like a DNS issue, but lets try and update the database manuelly so that you can do a quick scan see if any infections come up. Follow the instructions below you you can update it and do a quick scan. Let us know if it found anything.

Manual Update of Definition Database

If you cannot update the database to the latest version within the MBAM window, you may follow the instructions below and update it manually:

ISSUE: I need to get the latest database onto a computer that cannot access the Internet.

SOLUTION: You can manually copy the database from a working computer using a flash drive or CD onto the infected PC. Our database file is stored in the following locations.

• Windows XP and 2000
  
• C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref
  
• Windows Vista and Windows 7:
  
• C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref
  

You can also download a manual update from HERE -

***NOTE: This manual update will always be way behind in version level compared to updates from within the program.

**NOTE: Please note though that this should be a last resort and if at all possible you should attempt to download updates from within the program.

Once the system is clean and stable again you should update again from within the program.

[IXIReaperIXI]

After doing a search of my PC because of getting redirected again, i found i have 2 csrss.exe files on in task manager. I cannot see the location of either of them just that 1 is running at 00 or 01 with 5.1k memory and the other is at 00 with 950 memory. If this is the virus im assuming it runs if i get redirected and not constantly.

Any thoughts?

[IXIReaperIXI]

Also, unfortunately the manual update page says its not working in firefox. ill try it real quick in IE

[Firefox]

get the manuel update using a computer that is clean with no infections and transfer it to the one that may be infected. If you computer is infected then you will have to seek help from the experts as we do not provide help for that in this section of the forum.....

------------------------------------------------------------------------------

Please read the following so that you can begin the cleaning process:

As we don't deal with malware removal in the General Malwarebytes' Anti-Malware Forum, you need to start a topic in the Malware Removal forum so a qualified helper can help you fix any malware related problems/infections you may have.

• Please read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.
  
• After posting your new post, make sure under options, you select Track this topic and choose Immediate Email Notification, so that you're alerted when someone has replied to your post.
  
• One of the expert helpers there will give you one-on-one assistance when one becomes available.
  
• Please refrain from making any further changes to your computer (Install/Uninstall programs, use special fix tools, delete files, edit the registry, etc...) unless advised by a malware removal helper. Doing so can result in system changes which may hinder the attempts by a helper to clean your machine.
  

NOTE: Please DO NOT post back to (bump) your topic within the first 48 hours.

Replying to your own posts changes the post count and helpers are looking for topics with zero replies. If you reply to your own post helpers may think that you're already being helped and thus overlook your post.

• • If there is no reply from any experts after 48 hours, you can reply to the topic, asking for help again.
    Or
    
  • You may send a Private Message to a Moderator asking for assistance.
    

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org or here.

Please be patient, someone will assist you as soon as it is possible.

PS: Please use the "ADDREPLY" button instead of other ones when you start replying.

[sleepyrz]

manual update isnt working

Step 1

Not working for me, says page cannot be opened.

Step 2

Traceroute Malwarebytes CDN version 1.5

Wed 09/08/2010

19:47:16.20

Phase #1

Tracerouting: data-cdn.mbamupdates.com

Unable to resolve target system name data-cdn.mbamupdates.com.

DNS Info

Server: UnKnown

Address: 192.168.1.1

DNS request timed out.

timeout was 2 seconds.

============================================================

Phase #2

Tracerouting: llnw.data-cdn.mbamupdates.com

Unable to resolve target system name llnw.data-cdn.mbamupdates.com.

DNS Info

Server: UnKnown

Address: 192.168.1.1

============================================================

Phase #3

Tracerouting: edge.data-cdn.mbamupdates.com

Unable to resolve target system name edge.data-cdn.mbamupdates.com.

DNS Info

Server: UnKnown

Address: 192.168.1.1

============================================================

Finished at: 19:47:19.63

same thing as that guy

but i get this exaact same thing from all computers

i have tried 5 different ones and they all give me this message

[Firefox]

That traceroute log shows a DNS issue, and it's possible that your DNS settings have been hijacked. If you connect to the Internet through a router, then I would highly recommend that you reset it to it's factory default settings by holding the 'Reset' button on the back of the router until the power light starts blinking. This will clear all of the settings, including DNS settings, and reset them to the factory defaults, which should resolve the issue.

Please note that you will need to set the router back up after performing this reset.

Also, if you know how to check the router's DNS settings manually, then you can change the DNS settings in the router to resolve the issue without resetting it.

[noknojon]

If you reset the router button you will need to set it up again as it may cancel all settings - Procedure is below -

Open Internet Explorer > Type 192.168.1.1 in the address bar > press Enter > Follow the directions given -

Thank You