Free Republic
Browse · Search
General/Chat
Topics · Post Article

Skip to comments.

Micosoft Update KB951748 (WinXP) kills ZoneAlarm Firewall
ZoneAlarm forum ^ | July 9, 2008 | ZoneAlarm forum moderator

Posted on 07/09/2008 12:29:36 PM PDT by Constitutionalist Conservative

We are investigating the issue with the MS update KB951748. For the time being we suggest you uninstall KB951748 until the issue has been resolved. We will post when we have more information

Best regards, Forum Moderator


TOPICS: Computers/Internet
KEYWORDS: denialofservice; dosattack; getamac; internet; lowqualitycrap; microsoft; xp; zonealarm
Navigation: use the links below to view more comments.
first 1-5051-76 next last
I installed the update last night, and when I booted up this morning, ZoneAlarm was blocking all Internet traffic. Short and sweet: If you use ZoneAlarm Firewall and Windows XP, do not install KB951748 until you get the all-clear from the ZoneAlarm folks.
1 posted on 07/09/2008 12:29:36 PM PDT by Constitutionalist Conservative
[ Post Reply | Private Reply | View Replies]

To: Constitutionalist Conservative
The code isn't done until Lotus Zonealarm won't run.
2 posted on 07/09/2008 12:31:23 PM PDT by Knitebane (Happily Microsoft free since 1999.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Constitutionalist Conservative

Thanks for the heads up.


3 posted on 07/09/2008 12:32:13 PM PDT by TheWasteLand
[ Post Reply | Private Reply | To 1 | View Replies]

To: Constitutionalist Conservative

They are doing their best to make XP update remediation so complex that customers will feel compelled to upgrade to Vista out of sheer frustration.


4 posted on 07/09/2008 12:33:01 PM PDT by Mr. Jeeves ("One man's 'magic' is another man's engineering. 'Supernatural' is a null word." -- Robert Heinlein)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Constitutionalist Conservative

Holy flipping, god damn it. I spent most of the last 20 hours dealing with this for several family members.

Thanks for the post.


5 posted on 07/09/2008 12:33:34 PM PDT by JerseyHighlander
[ Post Reply | Private Reply | To 1 | View Replies]

To: Constitutionalist Conservative

Shell we start a pool to guess the time to the first “Buy a Mac,” response?


6 posted on 07/09/2008 12:36:13 PM PDT by The_Victor (If all I want is a warm feeling, I should just wet my pants.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Constitutionalist Conservative

bump


7 posted on 07/09/2008 12:36:36 PM PDT by Sgt_Schultze
[ Post Reply | Private Reply | To 1 | View Replies]

To: The_Victor

Buy VISTA.


8 posted on 07/09/2008 12:37:58 PM PDT by Pistolshot (When you let what you are define who you are, you create divisiveness.)
[ Post Reply | Private Reply | To 6 | View Replies]

To: ShadowAce

For your ping list, this one is a huge pain in the arse due to the user base, I’ve been recommending ZoneAlarm for years to non-techy users, I’ve been getting random calls all night day from people asking for help.


9 posted on 07/09/2008 12:38:47 PM PDT by JerseyHighlander
[ Post Reply | Private Reply | To 1 | View Replies]

To: Constitutionalist Conservative

Thanks, CC.


10 posted on 07/09/2008 12:46:35 PM PDT by Bahbah (Typical white person)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Constitutionalist Conservative

After using ZoneAlarm for years I switched over to COMODO a couple of weeks ago....good idea or bad????


11 posted on 07/09/2008 12:48:42 PM PDT by RckyRaCoCo (Gov. Granholm=Garbage)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Constitutionalist Conservative

yeah, I was seeing something like this.

Figured MS had screwed up. No browser was working (not even Firefox).


12 posted on 07/09/2008 12:55:28 PM PDT by weegee (Maybe 143 days wasn’t enough experience.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Constitutionalist Conservative
I'm uninstalling the KB951748 update on friends/customers laptops as we speak. However on my own machine I did the following and it works:

If the windows update changed the usual needed files for networking/internet, then the ZA will not see the changes and continue to use the previously known files and ignore the newer files. Even though the file names and locations are still the same from before, now the file size and checksums no longer match.

To solve this, just reset the ZA database and the ZA will be "fresh" as when it was first installed:

  • Boot your computer into the Safe Mode
  • Navigate to the c:\windows\internet logs folder
  • Delete the backup.rdb, iamdb.rdb, *.ldb and the tvDebug files in the folder
  • Clean the Recycle Bin
  • Reboot into the normal mode
  • ZA will be just like new with no previous settings or data



Once this is finished, reboot back into the normal mode and in the new network found windows, set the new network to Trusted.
Then do this to ensure the ZA is setup properly:

Make sure your DNS and DHCP server IP's are in your Firewall's Trusted zone. Finding DNS and DCHP servers, etc

1. Go to Run and type in command and hit 'ok', and in the command then type in ipconfig /all then press the enter key. In the returned data list will be a line DNS and DHCP Servers with the IP address(s) listed out to the side. Make sure there is a space between the ipconfig and the /all, and the font is the same (no capitals).
2. In ZA on your machine on the Firewall, open the Zones tab, click Add and then select IP Address. Make sure the Zone is set to Trusted. Add the DNS IP(s) .
3. Click OK and Apply. Then do the same for the DHCP server.
4. The localhost (127.0.0.1) must be listed as Trusted.
5. The Generic Host Process (svchost.exe) as seen in the Zone Alarm's Program's list must have server rights for the Trusted Zone.
Plus it must have both Trusted and Internet Access.

Oldsod.

http://forum.zonelabs.org/zonelabs/board/message?board.id=cfg&message.id=52727

 

 

13 posted on 07/09/2008 1:01:54 PM PDT by JerseyHighlander
[ Post Reply | Private Reply | To 1 | View Replies]

To: Constitutionalist Conservative
According to Some ZoneAlarm users in the dark after Microsoft patch at the Defense in Depth blog on c|net
For those who have already installed the patch, Check Point recommends users remove Microsoft Update KB951748 from their systems. Detailed instructions for doing this can be found here. Another option is to lower the ZoneAlarm Internet security setting to "medium," although Check Point doesn't recommend that.

14 posted on 07/09/2008 1:02:45 PM PDT by Mike Fieschko (et numquam abrogatam)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Constitutionalist Conservative

I’ve never been able to get ZA working correctly with Win2K


15 posted on 07/09/2008 1:06:23 PM PDT by djf (I don't believe in perpetual motion. Perpetual mutton, that's another thing entirely!)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Constitutionalist Conservative

I found this one yesterday when I got home. I ran the usual suspects and found it was ZA pretty fast and realized the update I had installed that morning had done the deed.


16 posted on 07/09/2008 1:08:06 PM PDT by doodad
[ Post Reply | Private Reply | To 1 | View Replies]

To: RckyRaCoCo

I had major problems with Comodo. And it was the devil to remove. It left a lot of residual stuff that I had to weed out.

FWIW, I had problem’s connecting this a.m. as well, having installed Zone Alarm a few days ago, and having Windows XP updates over the past few days. I found that my Internet Security was set to HIGH in Zone Alarm. I reset it to MEDIUM and the problems went away.

Of course, this was after about an hour of fooling around with my modem & router.


17 posted on 07/09/2008 1:08:28 PM PDT by bcsco (To heck with a third party. We need a second one....)
[ Post Reply | Private Reply | To 11 | View Replies]

To: JerseyHighlander
I'm uninstalling the KB951748 update on friends/customers laptops as we speak. However on my own machine I did the following and it works:

[snip]

As I understand the MS update, the patch was to 'address[] the flaw in DNS made public on Tuesday by security researcher Dan Kaminsky. (I am quoting Some ZoneAlarm users in the dark after Microsoft patch.

Do your steps revert to the state where DNS can be poisoned? (If DNS can be poisoned, then for example, a person may think he's visiting his bank's web site, but in fact be visiting a fake site, and have passwords, PINs, etc., stolen.)
18 posted on 07/09/2008 1:11:57 PM PDT by Mike Fieschko (et numquam abrogatam)
[ Post Reply | Private Reply | To 13 | View Replies]

To: JerseyHighlander
However on my own machine I did the following and it works:

If you look at the replies to that post, others are getting mixed results. Later on, the same guy ends up recommending completely uninstalling and reinstalling ZA (clearing out additional files in several folders before reinstalling).

19 posted on 07/09/2008 1:17:54 PM PDT by Constitutionalist Conservative (Global Warming Heretic -- http://agw-heretic.blogspot.com)
[ Post Reply | Private Reply | To 13 | View Replies]

To: Constitutionalist Conservative

placeholder


20 posted on 07/09/2008 1:19:51 PM PDT by xone
[ Post Reply | Private Reply | To 1 | View Replies]

To: Constitutionalist Conservative
Whoops, here's the link.
21 posted on 07/09/2008 1:20:16 PM PDT by Constitutionalist Conservative (Global Warming Heretic -- http://agw-heretic.blogspot.com)
[ Post Reply | Private Reply | To 19 | View Replies]

To: Constitutionalist Conservative; Swordmaker; Ernest_at_the_Beach; ShadowAce

I wondered what hosed my internet connection last night after that upgrade. Figures.


22 posted on 07/09/2008 1:27:29 PM PDT by martin_fierro (< |:)~)
[ Post Reply | Private Reply | To 1 | View Replies]

To: bcsco

Thanks for the info, I had periodic problems with ZoneAlarm in the past and if I recall I did the same as you and lowered security level to get things to work properly with certain applications. I am not too tech savvy but it seems as though ZoneAlarm was a bit more user friendly for newbies than Comodo. Maybe I’ll switch back(heh, if I can).


23 posted on 07/09/2008 1:27:45 PM PDT by RckyRaCoCo (Gov. Granholm=Garbage)
[ Post Reply | Private Reply | To 17 | View Replies]

To: Pistolshot
Buy VISTA

... and be prepared to kiss your files goodbye every once in a while. Vista is a disaster. Read this (all of it) from a Microsoft forum, and note that the status (upper right hand corner) is "Unanswered."

FTR, my opinions about Microsoft are generally positive.

ML/NJ

24 posted on 07/09/2008 1:32:21 PM PDT by ml/nj
[ Post Reply | Private Reply | To 8 | View Replies]

To: martin_fierro

Wonder if some Democrat staffer will try this again on election day...


25 posted on 07/09/2008 1:35:28 PM PDT by weegee (Maybe 143 days wasn’t enough experience.)
[ Post Reply | Private Reply | To 22 | View Replies]

To: The_Victor

Meeee!!! I get to be first!! 4:38 pm sir, to answer your question.

Buy a Mac. Happy sigh


26 posted on 07/09/2008 1:40:22 PM PDT by DeLaine (Artificial intelligence is no match for natural stupidity)
[ Post Reply | Private Reply | To 6 | View Replies]

To: rdb3; Calvinist_Dark_Lord; GodGunsandGuts; CyberCowboy777; Salo; Bobsat; JosephW; ...

27 posted on 07/09/2008 1:45:05 PM PDT by ShadowAce (Linux -- The Ultimate Windows Service Pack)
[ Post Reply | Private Reply | To 1 | View Replies]

To: RckyRaCoCo

I used Zone Alarm for years. Then for some reason I tried Comodo. It’s been awhile since I took it off my laptop so I can’t recall all the issues with the uninstall. But it was serious.

Since then, I’ve been running Windows Firewall because I have my router firewall (I don’t use the wireless configuration much at all because I’m ethernet wired to the router most of the time). But then I got a bug up my butt a few days ago and reinstalled Zone Alarm. It worked well until this a.m.

What I did (unwittingly) was the first option mentioned in the Microsoft “work around”; lowering the security slider down to “Medium”. It worked for me. I haven’t uninstalled the Microsoft update because everything seems to be working without doing so. I’ve even had one further update installed since then.


28 posted on 07/09/2008 1:47:14 PM PDT by bcsco (To heck with a third party. We need a second one....)
[ Post Reply | Private Reply | To 23 | View Replies]

To: Constitutionalist Conservative
Yep -- did it this morning and upon restart, no internet.....spent 45 minutes with a Time Warner Cable tech in Manila, who had me disable Zone Alarm to get back up.

Since then, I've actually unistalled my Zone Alarm and am existing right now on the less than stellar Windows XP firewall.

29 posted on 07/09/2008 1:56:23 PM PDT by ErnBatavia (...forward this to your 10 very best friends....)
[ Post Reply | Private Reply | To 1 | View Replies]

To: The_Victor

Get a KVM switch and a second low end box for web browsing with Linux....


30 posted on 07/09/2008 2:00:54 PM PDT by Ernest_at_the_Beach (No Burkas for my Grandaughters!)
[ Post Reply | Private Reply | To 6 | View Replies]

To: ErnBatavia

See #30.


31 posted on 07/09/2008 2:02:23 PM PDT by Ernest_at_the_Beach (No Burkas for my Grandaughters!)
[ Post Reply | Private Reply | To 29 | View Replies]

To: Constitutionalist Conservative
That Damn Microsoft windows Update trashed my network access to the Internet.The only way I could get back in was to use the system restore.

I wish they would check things before they send them out so they can drive people crazy.Not everybody has an on-call computer technician

32 posted on 07/09/2008 2:07:22 PM PDT by puppypusher (The world is going to the dogs.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Ernest_at_the_Beach
I switched over to Ubuntu about a year ago. I find myself drawn to threads like this for some reason. Schadenfreude ?
33 posted on 07/09/2008 2:18:42 PM PDT by Nateman (This post made with a Linux only computer.)
[ Post Reply | Private Reply | To 31 | View Replies]

To: puppypusher

I generally wait before adopting the updates.

What bothered me was that I was offered the “option” to do express install or “custom” install which the note said might require a reboot.

The express install ALSO demanded a reboot and kept nagging me so I took the downtime for a reboot and was hosed.

I may go back to waiting a couple of weeks for their “patches” before I install them.


34 posted on 07/09/2008 2:26:38 PM PDT by weegee (Maybe 143 days wasn’t enough experience.)
[ Post Reply | Private Reply | To 32 | View Replies]

To: Constitutionalist Conservative
I had upgraded to XP Service Pack 3 a month or so ago.

Then just 2 days another XP Service Pack 3 came through (Wonder if it had anything to do with Bill Gates leaving?)

Nevertheless, it said 29 minutes for the download and install. Keep in mind I have Wireless High Speed Internet pumping 6 Megabits down per second.

It ended up taking 90 minutes. Furthermore, my Microsoft Outlook (From Office 2003) received the following updates.
KB953465 and KB953432...

Well as you can guess it will not install. I have searched the web and found that it contains some updates, but if you have some other update (which I do) it will not install. So basically my Windows XP is set for Automatic updates. I had to turn it off because this new stupid update keeps trying to install. How frustrating!

If anyone has a resolution so I can turn back on my automatic updates, then I would appreciate it. Since I had to turn off my Auto Update from Microsoft. I now have a little Icon on the bottom right hand side of my screen indicating its off. How annoying....

35 posted on 07/09/2008 2:27:30 PM PDT by Sprite518
[ Post Reply | Private Reply | To 1 | View Replies]

bookmark for looming pain in the ass


36 posted on 07/09/2008 2:30:00 PM PDT by PrivateIdaho ("... like a wild potato.")
[ Post Reply | Private Reply | To 1 | View Replies]

To: puppypusher
I wish they would check things before they send them out...

They do. A few minutes before release they called me and I told 'em everything checked out fine and they were good to go.

My mistake..

37 posted on 07/09/2008 2:41:36 PM PDT by TomServo
[ Post Reply | Private Reply | To 32 | View Replies]

To: JerseyHighlander


Once this is finished, reboot back into the normal mode and in the new network found windows, set the new network to Trusted.
Then do this to ensure the ZA is setup properly:

Make sure your DNS and DHCP server IP's are in your Firewall's Trusted zone. Finding DNS and DCHP servers, etc

See?  Thats a lot easier than the "Not Ready Desktop Users" Linux.  

And those newbies that can't intuit this common sense solution can just jump on the web to get instructions. 

End of problem. 

38 posted on 07/09/2008 2:44:40 PM PDT by MichiganMan (So you bought that big vehicle and now want to whine about how much it costs to fill it? Seriously?)
[ Post Reply | Private Reply | To 13 | View Replies]

To: All

Always like to see a FR computer thread. A couple of questions for FR wizards.

1. On XP I got a SP3 notice to download a month or two ago. When I clicked download nothing happened, and my laptop still shows only SP2. What happened? Is it worth the trouble to go download it?

2. I’m seriously interested in a ‘MSI Wind’, the Linux version. Anyone real familiar with that OS to give this beginner an idea of what it’s like on a daily basis?


39 posted on 07/09/2008 2:47:48 PM PDT by msnpatriot
[ Post Reply | Private Reply | To 37 | View Replies]

To: Nateman
Right!.. .I still have an old box I fire up once a year to run turbotax.... My next major investment:

Rosewill R2-RAID Dual 3.5" SATA 3G HDD 2-Bay RAID 0/1/BIG/JBOD/SAFE33/SAFE55 System/ USB2.0 & eSATA Output Design -

Stuff two Terabyte drives in it and run in ?Raid 1....Mirror.,...

40 posted on 07/09/2008 2:50:52 PM PDT by Ernest_at_the_Beach (No Burkas for my Grandaughters!)
[ Post Reply | Private Reply | To 33 | View Replies]

To: msnpatriot
There are a lot of Freepers running various Linux Distros....

Download a Live Cd version and look at it....For Web browsing with Firefox,...will look like what you have already.

41 posted on 07/09/2008 2:53:35 PM PDT by Ernest_at_the_Beach (No Burkas for my Grandaughters!)
[ Post Reply | Private Reply | To 39 | View Replies]

To: JerseyHighlander
Holy flipping, god damn it. I spent most of the last 20 hours dealing with this for several family members.>/i>

I spent about ten minutes confirming that ZoneAlarm was blocking the internet, figured it was associated with an update, uninstalled ZA, and will wait it out. It will be fixed in a few days and I will reinstall.

42 posted on 07/09/2008 2:59:28 PM PDT by js1138
[ Post Reply | Private Reply | To 5 | View Replies]

To: ml/nj

I guess you don’t recognize sarcasm when you see it.


43 posted on 07/09/2008 3:08:50 PM PDT by Pistolshot (When you let what you are define who you are, you create divisiveness.)
[ Post Reply | Private Reply | To 24 | View Replies]

To: martin_fierro
I wondered what hosed my internet connection last night after that upgrade. Figures.

Contact tech support:

http://www.youtube.com/watch?v=BcQ7RkyBoBc

44 posted on 07/09/2008 3:26:24 PM PDT by HAL9000 ("No one made you run for president, girl."- Bill Clinton)
[ Post Reply | Private Reply | To 22 | View Replies]

To: msnpatriot
I’m seriously interested in a ‘MSI Wind’, the Linux version. Anyone real familiar with that OS to give this beginner an idea of what it’s like on a daily basis?

The MSI Wind uses a version of Linux called SUSE. It's a German distro and from what I've read about it's rock solid. I bought a Linux preloaded computer from Dell My favorite use so far is the graphics manipulation. I've used it to make my own additions to Pookies Toons which ran for many years here on FreeRepublic.

The few problems I've had were easy to resolve because many Linux users are hard core geeks and like to troubleshoot problems just for kicks, and they do so on easy to use forums. (I even stirred up a little trouble recently on one thread claiming it "wasn't political" and clearly was.)

45 posted on 07/09/2008 3:30:24 PM PDT by Nateman (This post made with a Linux only computer.)
[ Post Reply | Private Reply | To 39 | View Replies]

To: Constitutionalist Conservative

This had me pulling my hair out this afternoon until I found the answer. Good thing I had a laptop that doesn’t have Zone Alarm but our two desktops were down hard. Everything is fine now after I uninstalled the patch and disabled automatic windows updates.


46 posted on 07/09/2008 3:52:12 PM PDT by GATOR NAVY (Your parents will all receive phone calls instructing them to love you less now.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: HAL9000

That was funny as hell


47 posted on 07/09/2008 4:16:19 PM PDT by GATOR NAVY (Your parents will all receive phone calls instructing them to love you less now.)
[ Post Reply | Private Reply | To 44 | View Replies]

To: HAL9000
" Contact tech support: http://www.youtube.com/watch?v=BcQ7RkyBoBc

Dude, that is the funniest thing I've seen on the net in a long time.

48 posted on 07/09/2008 5:15:00 PM PDT by HangThemHigh (Entropy's not what it used to be.)
[ Post Reply | Private Reply | To 44 | View Replies]

To: ErnBatavia
Since then, I've actually unistalled my Zone Alarm and am existing right now on the less than stellar Windows XP firewall.

Sounds like a big "mission accomplished" from microsoft.

49 posted on 07/09/2008 6:13:05 PM PDT by zeugma (Mark Steyn For Global Dictator!)
[ Post Reply | Private Reply | To 29 | View Replies]

To: HAL9000

Hilarious!


50 posted on 07/09/2008 6:27:17 PM PDT by zeugma (Mark Steyn For Global Dictator!)
[ Post Reply | Private Reply | To 44 | View Replies]


Navigation: use the links below to view more comments.
first 1-5051-76 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
General/Chat
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson