Skip to comments.Micosoft Update KB951748 (WinXP) kills ZoneAlarm Firewall
Posted on 07/09/2008 12:29:36 PM PDT by Constitutionalist Conservative
We are investigating the issue with the MS update KB951748. For the time being we suggest you uninstall KB951748 until the issue has been resolved. We will post when we have more information
Best regards, Forum Moderator
Thanks for the heads up.
They are doing their best to make XP update remediation so complex that customers will feel compelled to upgrade to Vista out of sheer frustration.
Holy flipping, god damn it. I spent most of the last 20 hours dealing with this for several family members.
Thanks for the post.
Shell we start a pool to guess the time to the first “Buy a Mac,” response?
For your ping list, this one is a huge pain in the arse due to the user base, I’ve been recommending ZoneAlarm for years to non-techy users, I’ve been getting random calls all night day from people asking for help.
After using ZoneAlarm for years I switched over to COMODO a couple of weeks ago....good idea or bad????
yeah, I was seeing something like this.
Figured MS had screwed up. No browser was working (not even Firefox).
If the windows update changed the usual needed files for networking/internet, then the ZA will not see the changes and continue to use the previously known files and ignore the newer files. Even though the file names and locations are still the same from before, now the file size and checksums no longer match.
To solve this, just reset the ZA database and the ZA will be "fresh" as when it was first installed:
- Boot your computer into the Safe Mode
- Navigate to the c:\windows\internet logs folder
- Delete the backup.rdb, iamdb.rdb, *.ldb and the tvDebug files in the folder
- Clean the Recycle Bin
- Reboot into the normal mode
- ZA will be just like new with no previous settings or data
Once this is finished, reboot back into the normal mode and in the new network found windows, set the new network to Trusted.
Then do this to ensure the ZA is setup properly:
Make sure your DNS and DHCP server IP's are in your Firewall's Trusted zone. Finding DNS and DCHP servers, etc
1. Go to Run and type in command and hit 'ok', and in the command then type in ipconfig /all then press the enter key. In the returned data list will be a line DNS and DHCP Servers with the IP address(s) listed out to the side. Make sure there is a space between the ipconfig and the /all, and the font is the same (no capitals).
2. In ZA on your machine on the Firewall, open the Zones tab, click Add and then select IP Address. Make sure the Zone is set to Trusted. Add the DNS IP(s) .
3. Click OK and Apply. Then do the same for the DHCP server.
4. The localhost (127.0.0.1) must be listed as Trusted.
5. The Generic Host Process (svchost.exe) as seen in the Zone Alarm's Program's list must have server rights for the Trusted Zone.
Plus it must have both Trusted and Internet Access.
For those who have already installed the patch, Check Point recommends users remove Microsoft Update KB951748 from their systems. Detailed instructions for doing this can be found here. Another option is to lower the ZoneAlarm Internet security setting to "medium," although Check Point doesn't recommend that.
I’ve never been able to get ZA working correctly with Win2K
I found this one yesterday when I got home. I ran the usual suspects and found it was ZA pretty fast and realized the update I had installed that morning had done the deed.
I had major problems with Comodo. And it was the devil to remove. It left a lot of residual stuff that I had to weed out.
FWIW, I had problem’s connecting this a.m. as well, having installed Zone Alarm a few days ago, and having Windows XP updates over the past few days. I found that my Internet Security was set to HIGH in Zone Alarm. I reset it to MEDIUM and the problems went away.
Of course, this was after about an hour of fooling around with my modem & router.
If you look at the replies to that post, others are getting mixed results. Later on, the same guy ends up recommending completely uninstalling and reinstalling ZA (clearing out additional files in several folders before reinstalling).
I wondered what hosed my internet connection last night after that upgrade. Figures.
Thanks for the info, I had periodic problems with ZoneAlarm in the past and if I recall I did the same as you and lowered security level to get things to work properly with certain applications. I am not too tech savvy but it seems as though ZoneAlarm was a bit more user friendly for newbies than Comodo. Maybe I’ll switch back(heh, if I can).
... and be prepared to kiss your files goodbye every once in a while. Vista is a disaster. Read this (all of it) from a Microsoft forum, and note that the status (upper right hand corner) is "Unanswered."
FTR, my opinions about Microsoft are generally positive.
Wonder if some Democrat staffer will try this again on election day...
Meeee!!! I get to be first!! 4:38 pm sir, to answer your question.
Buy a Mac. Happy sigh
I used Zone Alarm for years. Then for some reason I tried Comodo. It’s been awhile since I took it off my laptop so I can’t recall all the issues with the uninstall. But it was serious.
Since then, I’ve been running Windows Firewall because I have my router firewall (I don’t use the wireless configuration much at all because I’m ethernet wired to the router most of the time). But then I got a bug up my butt a few days ago and reinstalled Zone Alarm. It worked well until this a.m.
What I did (unwittingly) was the first option mentioned in the Microsoft “work around”; lowering the security slider down to “Medium”. It worked for me. I haven’t uninstalled the Microsoft update because everything seems to be working without doing so. I’ve even had one further update installed since then.
Since then, I've actually unistalled my Zone Alarm and am existing right now on the less than stellar Windows XP firewall.
Get a KVM switch and a second low end box for web browsing with Linux....
I wish they would check things before they send them out so they can drive people crazy.Not everybody has an on-call computer technician
I generally wait before adopting the updates.
What bothered me was that I was offered the “option” to do express install or “custom” install which the note said might require a reboot.
The express install ALSO demanded a reboot and kept nagging me so I took the downtime for a reboot and was hosed.
I may go back to waiting a couple of weeks for their “patches” before I install them.
Then just 2 days another XP Service Pack 3 came through (Wonder if it had anything to do with Bill Gates leaving?)
Nevertheless, it said 29 minutes for the download and install. Keep in mind I have Wireless High Speed Internet pumping 6 Megabits down per second.
It ended up taking 90 minutes. Furthermore, my Microsoft Outlook (From Office 2003) received the following updates.
KB953465 and KB953432...
Well as you can guess it will not install. I have searched the web and found that it contains some updates, but if you have some other update (which I do) it will not install. So basically my Windows XP is set for Automatic updates. I had to turn it off because this new stupid update keeps trying to install. How frustrating!
If anyone has a resolution so I can turn back on my automatic updates, then I would appreciate it. Since I had to turn off my Auto Update from Microsoft. I now have a little Icon on the bottom right hand side of my screen indicating its off. How annoying....
bookmark for looming pain in the ass
They do. A few minutes before release they called me and I told 'em everything checked out fine and they were good to go.
See? Thats a lot easier than the "Not Ready Desktop Users" Linux.
And those newbies that can't intuit this common sense solution can just jump on the web to get instructions.
End of problem.
Always like to see a FR computer thread. A couple of questions for FR wizards.
1. On XP I got a SP3 notice to download a month or two ago. When I clicked download nothing happened, and my laptop still shows only SP2. What happened? Is it worth the trouble to go download it?
2. I’m seriously interested in a ‘MSI Wind’, the Linux version. Anyone real familiar with that OS to give this beginner an idea of what it’s like on a daily basis?
Stuff two Terabyte drives in it and run in ?Raid 1....Mirror.,...
Download a Live Cd version and look at it....For Web browsing with Firefox,...will look like what you have already.
I spent about ten minutes confirming that ZoneAlarm was blocking the internet, figured it was associated with an update, uninstalled ZA, and will wait it out. It will be fixed in a few days and I will reinstall.
I guess you don’t recognize sarcasm when you see it.
Contact tech support:
The MSI Wind uses a version of Linux called SUSE. It's a German distro and from what I've read about it's rock solid. I bought a Linux preloaded computer from Dell My favorite use so far is the graphics manipulation. I've used it to make my own additions to Pookies Toons which ran for many years here on FreeRepublic.
The few problems I've had were easy to resolve because many Linux users are hard core geeks and like to troubleshoot problems just for kicks, and they do so on easy to use forums. (I even stirred up a little trouble recently on one thread claiming it "wasn't political" and clearly was.)
This had me pulling my hair out this afternoon until I found the answer. Good thing I had a laptop that doesn’t have Zone Alarm but our two desktops were down hard. Everything is fine now after I uninstalled the patch and disabled automatic windows updates.
That was funny as hell
Dude, that is the funniest thing I've seen on the net in a long time.
Sounds like a big "mission accomplished" from microsoft.