After SP3 or SP4 - Can't access internet

[Woody]

I have 2 W2K PC's, both with Zone Alarm Pro firewall and Norton AntiVirus
2003, connected to a local network behind a NetGear SOHO router/gateway
on a cable connection. One of the PC's has SP3 installed and is doing a
fine.

I built another PC, installing W2K from scratch, no service packs. PC
worked fine and could connect to the internet and access the local
network.

I then installed the five critical updates available to the PC at Windows
Update (330994, 329414, 814078, 2-13-02, 12-20-00). Seeing how old the
orginal W2K is I expected many more critical updates to be available to
this PC via Windows Update, but only five were listed plus SP4. (So I
suspect I need to update to a new SP first to be able to install
additional updates. I digress...). PC still worked fine after installing
the above five critical updates.

So I installed SP3 but found I could no longer access internet (but still
could access the local network). So I uninstalled SP3 and went back to
the orginal non-SP install, where I could connect to the internet once
again.

Then I attempted a SP4 install, same impact. No internet, but local
network still worked.

I've looked at my Networking control panel configuration and everything
seems correct. DHCP and DNS seem to be working fine. Ipconfig /all
reports correct info.

Note when SP3 or SP4 is installed and I attempt conenct to the internet,
a Zone Alarm alert reports my client application (e.g. IE6 browser,
telnet, ftp) is attempting to connect to a Destination IP of 2.0.0.x,
with a port number in the 3xxx range. I don't have this connection
problem when I uninstall SP3 or SP4?

Is the 2.0.0.x a block of public internet IP's? I cannot find any DNS
info on this block? So who owns this block of IP's?


On another note, should I back out of SP4 and then get the critical
updates one-by-one from www.microsoft.com/download?

I would rather install via Windows update. Or I could download updates on
another PC on the network, copy them over and install individually and
then see if the SP4 machine auto magically is able to connect to the
internet without attempting to connect to the 2.0.0.X addresses?


Thanks for any ideas.

Woody

 

[Dogbert]

You will get the Zone Alarm pop-up because, after SP4, the program trying to
run has changed. Without the exact IP address, we can't help you trace it.
Same with the port number.

 

[Woody]

Aware of the reason for ZA pop-ups. Not understanding why with SP3 or SP4
installed I'm directed to a 2.0.0.X IP address when I'm not when no SP is
installed. The IP address block is 2.0.0.X (the specific IP changes in the
block depending which type of internet client I'm using, and the port
number always changes, but is always in the 3000-3999 range.. That should
be enuff to go on to identify.

 

[Marina Roos]

You definitely need to get at least SP3, but rather SP4 and with it
ms03-026. Chances are big you're already blasted.
Don't connect to the internet on a freshly installed machine before you have
SP3 and ms03-026.

Marina

 

[Woody]

When I try to connect to a website, eg. www.yahoo.com, via port 80, Zone
Alarm alerts me that I'm attempting to make an outgoing connect to
Destination IP 2.0.4.18 port 3584.

What's that all about?

Tried installing SP2 with same negative impact. Any other suggestions?

BTW the Blaster patch requires SP2. So everytime I uninstall a SP it goes
away (not that Blaster has anything to do with my issue).

Woody

 

[Woody]

Marina,

With all due respect... Just because the Blaster is out there and
infecting people, from the info I previously provided how can you deduce
that I'm already "blasted"?

I've follwed MS and Symantec and others instructions for verifying if
I've been infected or not. Note the machine was just built and put on
line late last night.

I've just tried installing SP2, but have the same problems as with SP3
and SP4 before, so will need to uninstall SP2.

I have installed the Blaster patch anyway but when I remove SP2 it will
go away. Also I've disabled many of the of the W2K services which I don't
need and as recommended (e.g. RPC).

I need specific assistance regarding being able to to connect to the net
with a SP3 installed. You have not offered any help in this regard.

Please don't be a troll and respond any further if you cannot provide any
specific information rather than just warning me to be sure I have this
or that patch installed. I'm already completely aware of the patch/SP
requirements. Thanks anyway.

Woody

 

[Enkidu]

Zone Alarm has problems with SPs beyond SP2. Try turning it off and
see if you can still not access the Internet.

Cheers,

Cliff

 

[Woody]

Enkidu-

I've been using ZAP3 and then later ZAP4 on a W2K SP3 machine for some time
now without issues.

And I found the connectivity problem on the other W2K PC, which I described
previously, occurs even with SP2 installed.

Still searching for solutions.

Woody