Update error

[Jetstream]

I am receiving this error message when updating MBAM_ERROR_UPDATING(12002,0,WinhttpSendRequest).

WINXP Pro all service packs installed.

Symantec AntiVirus

Current Database 4/26/2010

Database Version 4040

Fingerprints Loaded 226168

Any help appreciated....Thanks..

[Haider]

Hello Jetstream:

I believe you have an old version, the current version is 1.46 I'd suggest to start from scratch. Please follow these steps in the same sequence:

If you have registered version then have the ID/KEY from the system handy, You should also have an email from Cleverbridge with your

ID/KEY purchase information

1. Uninstall Malwarebytes' Anti-Malware using Add/Remove programs from the Control Panel
   
2. Restart your computer (very important)
   
3. Download and run mbam-clean.exe
   
4. Restart your computer (very important)
   
5. Download a fresh copy from here
   
6. Disable AV temporarily. Then install MBAM from the newly downloaded copy after completion it will automatically open update window, please allow (current 4793)
   
7. Register it with the ID/KEY (in case of registered version)
   
8. Enable AV ensuring all recommened exclusions are still in place
   

Should you have any other question(s) please post back using button

[Jetstream]

Sir,

I have followed your instruction, but when it wnet to update I got the same error message.

[Haider]

Hello Jetstream:

Could you please provide Symantec AntiVirus version, also are you using a router to connect to Internet? please exclude following from Symantec AntiVirus

• C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
  
• C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
  
• C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
  
• C:\Program Files\Malwarebytes' Anti-Malware\zlib.dll
  
• C:\Program Files\Malwarebytes' Anti-Malware\mbam.dll
  
• C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll
  
• C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref
  
• C:\Windows\System32\drivers\mbam.sys
  
• C:\Windows\System32\drivers\mbamswissarmy.sys
  

[Jetstream]

Sir,

I am using Symantec Endpoint Protection. Can't find where to add the exceptions.

[Haider]

Hello Jetstream:

Once again same question: Are you using a router to connect to Internet? What are the scan results from Symantec Endpoint Protection. I am sorry I am not familiar with it, however, please check this (Section J) it's a different product but it may help you or wait for someone else to answer

[Jetstream]

Scan results were clean, and I am using a router

[Haider]

Hello Jetstream:

In the meantime please read this while you are waiting for someone familiar with Symantec Endpoint Protection, before we go through the process of resetting router to factory defaults

[Jetstream]

Ok, thanks...

[Firefox]

To enter exceptions in Symantec Endpoint Protection do this:

• * Right Click on your Symantec Endpoint Protection in the system trey
  * Click on Open Symantec Endpoint Protection
  * In the Status Window Click on Options in the section Antivirus and Antispyware Protection.
  * Click on Change Settings
  * Click on File System Auto-Protect Tab
  * Click on Centralized Exceptions Button
  * Click on Add....
  * Click on Security Risk Exception
  * Click on File and browse to the location where the files are located (as listed above in Post #4)
  * Repeat steps 7-9 until you have added all the files to the exceptions
  * Click Close when done adding exceptions
  * Click OK
  * Exit Symantec Endpoint Protection.
  

[Jetstream]

Thanks, I've done that but still cannot update

[Firefox]

Lets try and see if you may be having issues due to your router....

Here are some steps to diagnose update issues:

Step 1

Click on

this link

and let me know what it says. It should be just a 4-digit number in the upper-left corner.

Step 2

Please download and run the traceroute utility at

this link

. It will run a traceroute to our update servers to see if it can find the connection issue, and then it will write it to a log, and open that log in Notepad when it is done. Please either save the log as a Text File and then attach it to a reply, or copy and paste it into a reply, and I will forward it on to our server guy.

Note that it may take several minutes to run, and it may look like it is not doing anything for a few minutes. Normally it takes longer when there are errors that it has to log, but it's rare for it to go more than 10 minutes.

Step 3

Please download TCPView from Microsoft at

this link

.

This utility will monitor everything that is accessing the Internet or your local network. All you have to do is run TCPView, and then run Malwarebytes' Anti-Malware and start the update. Watch TCPView to see if mbam.exe shows up in the list. It will be pretty obvious, because it highlights it in green.

I need to know what "Remote Address" Malwarebytes' Anti-Malware is trying to connect to. Once it shows up in the list, you can right-click on the line for mbam.exe, and select 'Copy' in order to paste it into a reply. It will tell me what I need to know. Below is an example of what the line you are looking for will look like inside the following code box:

mbam.exe:3656 TCP vista-x64:52135 cdn-208-111-168-7.ord.llnw.net:http ESTABLISHED

[jolyn_5]

I'm having the exact same problem, I've tried the 3 steps that Firefox suggested.

In step 1 I got a "server not found" error page.

In step 2 I got this:

Traceroute Malwarebytes CDN version 1.5

Tue 10/12/2010

12:08:27.78

Phase #1

Tracerouting: data-cdn.mbamupdates.com

Unable to resolve target system name data-cdn.mbamupdates.com.

DNS Info

DNS request timed out.

timeout was 2 seconds.

DNS request timed out.

timeout was 2 seconds.

Server: UnKnown

Address: 213.109.66.237

DNS request timed out.

timeout was 2 seconds.

============================================================

Phase #2

Tracerouting: llnw.data-cdn.mbamupdates.com

Unable to resolve target system name llnw.data-cdn.mbamupdates.com.

DNS Info

DNS request timed out.

timeout was 2 seconds.

Server: UnKnown

Address: 213.109.66.237

DNS request timed out.

timeout was 2 seconds.

DNS request timed out.

timeout was 2 seconds.

============================================================

Phase #3

Tracerouting: edge.data-cdn.mbamupdates.com

Unable to resolve target system name edge.data-cdn.mbamupdates.com.

DNS Info

DNS request timed out.

timeout was 2 seconds.

Server: UnKnown

Address: 213.109.66.237

============================================================

Finished at: 12:08:44.01

In step 3: I I don't if I'm doing it wrong but while I have the viewer open, I tried opening Malwarebyts and running the update. I still gotthe same error but mbam.exe never showed up in the TCPViewer.

CAN SOME PLEASE HELP?! I have a virus that I think Malwarebyt3s can fix but without the update I don't think it's catching anything with the old 4/2010 update.

[Firefox]

jolyn_5 ---

That traceroute log shows a DNS issue, and it's possible that your DNS settings have been hijacked.

Try this - It is general solution that works most times -

You may want to copy/paste this to notepad as you will disconnect from the Internet for a while -

1. Very important: First disconnect your computer from the Internet. Just Log Off- while you reset the router -

2. Router Reset: Next you must reset the router to its default configuration. This can be done by inserting something tiny like a paper clip end or pencil tip into a small hole labeled "reset" located on the back of the router. Press and hold down the small button inside until the lights on the front of the router blink off and then on again (usually about 10 seconds).

• NOTE: To help prevent the router from getting hijacked again, make sure you change the default password to the router and also secure your wireless connection.
  

3. Reset the IP/DNS settings of your Internet connection:

Download this Microsoft Item

4. Flush the DNS cache:

• Click the Start logo in the bottom left corner of the screen
  
• Click on Run or press Windows Logo+R
  
• In the command window copy/paste the following:
  

  ipconfig /flushdns
  netsh winsock reset

  
  

• Then hit enter and a black box will flash .
  
• Exit the command window.
  5 Update: Try to update to the latest version
  NOTE:
  This is what we are looking for -
  

  Name: edge.data-cdn.mbamupdates.com
  Address: 68.232.45.133

  
  

Thank You -

[jolyn_5]

Unfortunately none of that worked. Still get the same error. Thanks anyways though.

[noknojon]

Hi -

This is a classic router hijack result -

213.109.66.237

The country code for this IP Address is RU

Russian Federation

If the above item will not work , please try this - Read carefully -

First try this --> Microsoft Fix It Item<-- then follow these instructions -

We can release your IP address settings, flush the DNS resolver cache, then renew you IP address settings.

It will be easier and less error prone, if we create a batch file to do this... please follow these steps:

1. Copy/paste all text in the code box (below)...to Notepad. (Do not use a Word Processor or WordPad).
   

   @echo off
   ipconfig /release
   ipconfig /flushdns
   ipconfig /renew
   del %0

   
   

2. Save type as "All Files"
   
3. Save the Notepad file on your desktop...as DNSreset.bat..
   Note : The .bat extension is very important
   
4. Double click on DNSreset.bat to run it.
   Vista-Win7 users: Right click on DNSreset.bat, select "Run As Administrator" to run it.
   A black CMD window will flash, then disappear...this is normal. The batch file will be deleted when finished.
   The IP address settings should be released and renewed and the DNS cache flushed.
   

Thank You -

EDIT -

Please let me know your results -

[jolyn_5]

Hello....I figured out what the problem was. Since Malwarebytes was unable to update and thus was unable to remove the (clicksor) virus I had, I had to try to remove the virus another way. I've FINALLY removed the virus some how and now malwarebyes is updating. I think the virus was preventing it from updating. If anyone else is having this error message it might be because you have a virus that is preventing malwarebytes from updating!!!

Thanks for all the help nonetheless!!

[Firefox]

Thanks for the update.....

Perhaps you can tell us how you performed your steps, and if you still have a sample of the file/virus you can submit it to our Research Center for evaluation.

[starbuckjones]

I am unable to update. I keep getting the following error.

MBAM_ERROR_UPDATING (12007, 0, WinHttpSendRequest)

Please advise.

Thanks

[Haider]

Hello starbuckjones:

Please click on button to start your own topic with following details. Someone will help you:

1. OS version including 32/64-bit
   
2. Installed Security Product(s) including Firewall
   
3. MBAM version (current 1.46)
   
4. Definition version (current 4819)
   
5. Do you use a router to connect to Internet
   

[Firefox]

I am unable to update. I keep getting the following error.

MBAM_ERROR_UPDATING (12007, 0, WinHttpSendRequest)

Please advise.

Thanks

Have you tried the solutions in this thread..... It would have been better to start your own topic, but try the solutions in Post #12 and #14 above.....