Bad Update?

[Ken]

I always let XP SP3 automatically install updates. Today,
for the 1st time, I have trouble. When KB951748 is installed
I not longer can get internet access. If I uninstall the fix
everything works OK.

1) - What could be causing this problem?
2) - XP automatically tries to reinstall the fix. How can I
stop this?
I know I can choose to be asked before a fix is installed
but I would prefer not to be bothered over and over again
with this particular fix.

 

[Rick]

I always let XP SP3 automatically install updates. Today, for the 1st
time, I have trouble. When KB951748 is installed I not longer can get
internet access. If I uninstall the fix everything works OK.

1) - What could be causing this problem?
2) - XP automatically tries to reinstall the fix. How can I stop this?
I know I can choose to be asked before a fix is installed but I would
prefer not to be bothered over and over again with this particular fix.

The problem is a conflict between ZA and KB951748.

--

Rick
Fargo, ND
N 46°53'251"
W 096°48'279"

Remember the USS Liberty
http://www.ussliberty.org/

 

[DL]

ZoneAlarm installed?

 

[IanKR]

I always let XP SP3 automatically install updates. Today, for the 1st time,

I have trouble. When KB951748 is installed I not longer can get internet
access. If I uninstall the fix everything works OK.

1) - What could be causing this problem?
2) - XP automatically tries to reinstall the fix. How can I stop this?
I know I can choose to be asked before a fix is installed but I would
prefer not to be bothered over and over again with this particular fix.

It's a conflict between ZoneAlarm and that MS update.

I followed this advice on ZA's User Forum:
http://forum.zonelabs.org:80/zonelabs/board/message?board.id=cfg&message.id=52727
and it still didn't solve the problem. The only thing that worked for me is
to:
1. Uninstall KB951748; or
2. Retain KB951748, disable ZA's Firewall and enable Window's Firewall; or
(if you want to
retain ZA's 2-way firewall)
3. Retain KB951748, change the slider in ZA's Firewall | Main | Internet
Zone Security to
Med. (from High).

I opted for 1. above, until ZA(/MS?) produce a workaround.

Keep an eye on this thread in ZA's forum:
http://forum.zonelabs.org/zonelabs/board/message?board.id=cfg&message.id=52860

Ian

 

[Ken]

It's a conflict between ZoneAlarm and that MS update.

I followed this advice on ZA's User Forum:
http://forum.zonelabs.org:80/zonelabs/board/message?board.id=cfg&message.id=52727

and it still didn't solve the problem. The only thing that worked for me
is to:
1. Uninstall KB951748; or
2. Retain KB951748, disable ZA's Firewall and enable Window's Firewall;
or (if you want to
retain ZA's 2-way firewall)
3. Retain KB951748, change the slider in ZA's Firewall | Main | Internet
Zone Security to
Med. (from High).

I opted for 1. above, until ZA(/MS?) produce a workaround.

Keep an eye on this thread in ZA's forum:
http://forum.zonelabs.org/zonelabs/board/message?board.id=cfg&message.id=52860


Ian

Reducing ZA sensitivity to Medium did the trick. I've been a
ZA user for a long time because I had heard bad things about
window's Firewall back 3+ years ago. what's your opinion
of the win firewall today?

 

[Ken]

It's a conflict between ZoneAlarm and that MS update.

I followed this advice on ZA's User Forum:
http://forum.zonelabs.org:80/zonelabs/board/message?board.id=cfg&message.id=52727

and it still didn't solve the problem. The only thing that worked for me
is to:
1. Uninstall KB951748; or
2. Retain KB951748, disable ZA's Firewall and enable Window's Firewall;
or (if you want to
retain ZA's 2-way firewall)
3. Retain KB951748, change the slider in ZA's Firewall | Main | Internet
Zone Security to
Med. (from High).

I opted for 1. above, until ZA(/MS?) produce a workaround.

Keep an eye on this thread in ZA's forum:
http://forum.zonelabs.org/zonelabs/board/message?board.id=cfg&message.id=52860


Ian

Just curious... how'd you guys know it was a conflict with ZA?

 

[TaurArian]

http://www.microsoft.com/windowsxp/...9aea&mid=fbffcc95-5991-4aa5-b321-5e4c39d89aea
OR
http://tinyurl.com/652vmw

Posted by: Carl MSFT
On the Windows Update Newsgroup

Quote –

“We (Microsoft) are aware of an issue that is affecting the ability of Zone
Alarm customers to access the Internet after the installation of the MS08-037
(KB951748) Security Update released on July 9th.

Both Microsoft and Zone Alarm are actively working on the issue. For further
help in resolving the issue, we suggest you contact Zone Alarm customer
service at 1-877-966-5221 (within North America), +1 415 633 4588 (outside
the United States), or by faxing to +1 415 633 4589.

The Zone Alarm website states that technical support is available for a fee
by calling 877-365-ZONE (9663). If you have another means of accessing the
Internet, the Zone Alarm website (www.zonealarm.com) has some recommended
workarounds.

One of the temporary workarounds that is mentioned on the Zone Alarm website
is to change the Zone Alarm Personal Firewall to a setting of “Mediumâ€
protection. The Zone Alarm site says that it does not recommend this option,
as it may reduce your security level. Microsoft also does not recommend this
workaround, but it may temporarily allow Internet access.â€

 

[Ken Blake, MVP]

Reducing ZA sensitivity to Medium did the trick.

That works, but in my view reducing your security to make ZA work is a
very dangerous thing to do.

I've been a
ZA user for a long time because I had heard bad things about
window's Firewall back 3+ years ago. what's your opinion
of the win firewall today?

I used to recommend ZA over the Windows firewall because it was
two-way, and the Windows firewall only monitored incoming traffic.
I've become convinced, however, that outbound protection is
meaningless. Once one of the nasties gets into your computer, it can
essentially do whatever it wants, including circumventing the
firewall. So the extra protection that a firewall that monitors
outbound traffic provides is more apparent than real.

I strongly recommend that you abandon your dangerous workaround (not a
real fix) and replace ZA with the Windows firewall.

 

[IanKR]

Just curious... how'd you guys know it was a conflict with ZA?

My ISP's (Virgin Media, in the UK) Customer Service told me, when I called
them.

 

[Ken]

That works, but in my view reducing your security to make ZA work is a
very dangerous thing to do.




I used to recommend ZA over the Windows firewall because it was
two-way, and the Windows firewall only monitored incoming traffic.
I've become convinced, however, that outbound protection is
meaningless. Once one of the nasties gets into your computer, it can
essentially do whatever it wants, including circumventing the
firewall. So the extra protection that a firewall that monitors
outbound traffic provides is more apparent than real.

I strongly recommend that you abandon your dangerous workaround (not a
real fix) and replace ZA with the Windows firewall.

Yes, I now recall it was that 2-way protection that I
thought was important. I didn't key-loggers to send my stuff
into the nether world.

 

[Tom [Pepper] Willett]

It's Zone Alarm, and they've issued a fix. You'll find the information in
several posts in this and many other MS newsgroups.

:I always let XP SP3 automatically install updates. Today,
: for the 1st time, I have trouble. When KB951748 is installed
: I not longer can get internet access. If I uninstall the fix
: everything works OK.
:
: 1) - What could be causing this problem?
: 2) - XP automatically tries to reinstall the fix. How can I
: stop this?
: I know I can choose to be asked before a fix is installed
: but I would prefer not to be bothered over and over again
: with this particular fix.

 

[Ken]

Yes, I now recall it was that 2-way protection that I thought was
important. I didn't key-loggers to send my stuff into the nether world.

Now that ZA has a workaround (fix?) I'm back on the ZA
bandwagon. While I understand your comment about outbound
protection - as my Mother used to say... "it can't hurt!".
Am I losing anything by using ZA? What's the Windows
Firewall got that ZA doesn't?

 

[Ken Blake, MVP]

Now that ZA has a workaround (fix?) I'm back on the ZA
bandwagon. While I understand your comment about outbound
protection - as my Mother used to say... "it can't hurt!".
Am I losing anything by using ZA? What's the Windows
Firewall got that ZA doesn't?

I don't think there's any terrible disadvantage to using ZA instead of
the Windows firewall. There might be a slight impact on performance,
but that's about it. Either choice is acceptable, as far as I'm
concerned, but just don't think that ZA provides any real improvement
in security.

 

[JD]

Now that ZA has a workaround (fix?) I'm back on the ZA bandwagon. While
I understand your comment about outbound protection - as my Mother used
to say... "it can't hurt!". Am I losing anything by using ZA? What's the
Windows Firewall got that ZA doesn't?

Where did you find the ZA workaround or can you tell me what you did to
fix this problem? I use an older version of ZA and I'd like to keep
using it if possible. I prefer a firewall that blocks both incoming and
outgoing. Just my preference.

 

[Joan Archer]

Less bloat <g>

 

[IanKR]

Where did you find the ZA workaround or can you tell me what you did to

fix this problem? I use an older version of ZA and I'd like to keep using
it if possible. I prefer a firewall that blocks both incoming and
outgoing. Just my preference.

Version 7.0.483.000 just issued:
http://download.zonealarm.com/bin/free/pressReleases/2008/LossOfInternetAccessIssue.html

 

[Twayne]

Where did you find the ZA workaround or can you tell me what you did
to fix this problem? I use an older version of ZA and I'd like to keep
using it if possible. I prefer a firewall that blocks both incoming
and outgoing. Just my preference.

ZA now has a new rev available that takes care of the problem. I
installed it earlier today and it's fine so far. XP Pro SP2+

 

[Twayne]

No, not really. The ZA firewall checks traffic both in and out where
the XP firewall only checks incoming; ignores outgoing. In fact, MS
even says it's just a basic firewall.
So with XP's firewall if you somehow allowed something malicious in
with a download or from someone else's CD/whatever, there is nothing to
stop it from sending out all your personal info and passwords etc.
unless a response comes back from one of those targets. As I see it,
the advantage of the XP firewall is to be a stop-gap while you're
getting things up and running and until it's replaced by something more
robust.
And of course ZA adds the little bells & whistles that are a ymmv
situation. Personally I find ZA a pretty decent product and have now
installed their "fixed" rev. So far so good.
IMO pretty obnoxious of MS to send out that fix without notifying
what it was, but as it turned out it was pretty quickly recognized so
their little escapade didn't do a lot of damage hassle-wise. MS isn't
the company they used to be, unfortunately.