MBAM update error

[theunraveler]

Hi all, I keep getting this error code

MBAM_ERROR_UPDATING (12007, 0, WinHttpSendRequest)

I wonder if my PC has been infected with malware?

Thanks

[noknojon]

Hi -

The 12007 error is usually not an infection in your computer , but more in your router - Please try this -

If you still have problems please follow these steps -

Here are some steps to diagnose update issues:

Step 1

Click on this link and let me know what it says. It should be just a 4-digit number in the upper-left corner.

Step 2

Please download and run the traceroute utility at this link. It will run a traceroute to our update servers to see if it can find the connection issue, and then it will write it to a log, and open that log in Notepad when it is done. Please either save the log as a Text File and then attach it to a reply, or copy and paste it into a reply, and I will forward it on to our server guy.

Note that it may take several minutes to run, and it may look like it is not doing anything for a few minutes. Normally it takes longer when there are errors that it has to log, but it's rare for it to go more than 10 minutes.

Step 3

Please download TCPView from Microsoft at this link.

This utility will monitor everything that is accessing the Internet or your local network. All you have to do is run TCPView, and then run Malwarebytes' Anti-Malware and start the update. Watch TCPView to see if mbam.exe shows up in the list. It will be pretty obvious, because it highlights it in green.

I need to know what "Remote Address" Malwarebytes' Anti-Malware is trying to connect to. Once it shows up in the list, you can right-click on the line for mbam.exe, and select 'Copy' in order to paste it into a reply. It will tell me what I need to know. Below is an example of what the line you are looking for will look like inside the following code box:

mbam.exe:3656	TCP	vista-x64:52135	cdn-208-111-168-7.ord.llnw.net:http	ESTABLISHED

Thank You -

[theunraveler]

Thank you for your quick reply.

I will endeavor to do as you instructed as soon as internet connection is restored to my house. The other thing is all my other house mates report aberrant browser activities such as being redirected to other websites, virus scan warnings such as Warning!!! Your computer contains various signs of viruses and malware programs presence. Your system requires immediate anti viruses check! Antivirus 2010 will perform a quick and free scanning of your PC for viruses and malicious programs. - OK/Cancel and new browser window would pop up when clicking on weblinks.

In your opinion what sort of infection is this?

[Firefox]

Hi, and Welcome to Malwarebytes!

Sounds like you have a combination of a router hijack (you will have to reset your router back to factory settings), and possibly some infected computers as you mention Antivirus 2010 which is a now Malware threat.

Please read the following so that you can begin the cleaning process:

As we don't deal with malware removal in the General Malwarebytes' Anti-Malware Forum, you need to start a topic in the Malware Removal forum so a qualified helper can help you fix any malware related problems/infections you may have.

• Please read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.
  
• After posting your new post, make sure under options, you select Track this topic and choose Immediate Email Notification, so that you're alerted when someone has replied to your post.
  
• One of the expert helpers there will give you one-on-one assistance when one becomes available.
  
• Please refrain from making any further changes to your computer (Install/Uninstall programs, use special fix tools, delete files, edit the registry, etc...) unless advised by a malware removal helper. Doing so can result in system changes which may hinder the attempts by a helper to clean your machine.
  

NOTE: Please DO NOT post back to (bump) your topic within the first 48 hours.

Replying to your own posts changes the post count and helpers are looking for topics with zero replies. If you reply to your own post helpers may think that you're already being helped and thus overlook your post.

• • If there is no reply from any experts after 48 hours, you can reply to the topic, asking for help again.
    Or
    
  • You may send a Private Message to a Moderator asking for assistance.
    

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org or here.

Please be patient, someone will assist you as soon as it is possible.

PS: Please use the "ADDREPLY" button instead of other ones when you start replying.

[theunraveler]

Dear Firefox,

Is there any way I can exclude my PC as an infected from the other PC in the house?

Thank you.

[Firefox]

being that you have all the pc's in the same connection/router I would suggest you check all of them. Best way to do it I suppose is to have all pc's off, and start with one at a time.

Make sure you clean the first pc, and also make sure your router was not compromised. You can reset the router back to factory settings by holding the reset button down for 10 seconds, then make sure you change the admin password.

After that, install malwarebytes on the suspected PC, update it, and run a quick scan, and clean any infections found.

Start with the router first, then repeat the steps on each pc.