Fix: KB951748/Zone Alarm - Loss of connectivity

M

MowGreen [MVP]

Have you tried rebuilding the winsock from a Command Prompt with ZA
*completely* disabled and the native XP firewall enabled or, just
disconnect from the net while doing the following ?

Start > Run > type in

cmd
Click OK or press Enter

At the Command Prompt, type in the below and press Enter after *each*
command

netsh winsock reset
exit

Restart the system and see if connectivity is restored.
If no joy suggest you start a *free* support case with MS:
For home users, no-charge support is available by calling 1-866-PCSAFETY in the United States and Canada or by contacting your local Microsoft subsidiary. For more information about how to contact your local Microsoft subsidiary for support issues with security updates, visit the Microsoft International Support Web site:
http://support.microsoft.com/common/international.aspx?rdpath=4 North American customers can also obtain instant access to unlimited no-charge e-mail support or to unlimited individual chat support by visiting the following Microsoft Web site:
http://support.microsoft.com/oas/default.aspx?&prid=7552

Or, not. The decision is entirely yours. As is the decision to install
Zone Alarm and continue using it when other free alternatives are
available that are not toxic to the OS. Here's one:

http://www.tallemu.com/free-firewall-protection-software.html

MowGreen [MVP 2003-2008]
===============
*-343-* FDNY
Never Forgotten
===============


Might read the entire thread from ZA as it was tried by a few and got the
same results as me -no go.


For those experiencing a loss of internet connectivity after installing
KB951748 with Zone Alarm installed as the firewall, here's the fix by a
Zone Alarm moderator:
http://forum.zonelabs.org/zonelabs/board/message?board.id=cfg&message.id=52727

If the windows update changed the usual needed files for
networking/internet, then the ZA will not see
the changes and continue to use the previously known files and ignore
the newer files. Even though the
file names and locations are still the same from before, now the file
size and checksums no longer match.

To solve this, just reset the ZA database and the ZA will be "fresh" as
when it was first installed:

# Boot your computer into the Safe Mode
# Navigate to the c:\windows\internet logs folder
# Delete the backup.rdb, iamdb.rdb, *.ldb and the tvDebug files in the
folder
# Clean the Recycle Bin
# Reboot into the normal mode
# ZA will be just like new with no previous settings or data


Once this is finished, reboot back into the normal mode and in the new
network found windows, set the
new network to Trusted.
Then do this to ensure the ZA is setup properly:

Make sure your DNS and DHCP server IP's are in your Firewall's Trusted
zone. Finding DNS and DCHP servers, etc

1. Go to Run and type in command and hit 'ok', and in the command then
type in ipconfig /all then press the enter key. In the returned data
list will be a line DNS and DHCP Servers with the IP address
(s) listed out to the side. Make sure there is a space between the
ipconfig and the /all, and the font is the same (no capitals).
2. In ZA on your machine on the Firewall, open the Zones tab, click Add
and then select IP Address. Make sure the Zone is set to Trusted. Add
the DNS IP(s) .
3. Click OK and Apply. Then do the same for the DHCP server.
4. The localhost (127.0.0.1) must be listed as Trusted.
5. The Generic Host Process (svchost.exe) as seen in the Zone Alarm's
Program's list must have server
rights for the Trusted Zone.
Plus it must have both Trusted and Internet Access.

Oldsod.


MowGreen [MVP 2003-2008]
===============
*-343-* FDNY
Never Forgotten
===============
 
N

noone

Been there, done that.
Latest on the ZA forum is to not install KB951748 until they (ZA) come up
with a fix.
So far no fix is out.
Workaround is to move the Internet Zone Security from High to Medium.
It's a coin toss as to who you want to place your trust in at the moment -
MS or ZA.?

MowGreen said:
Have you tried rebuilding the winsock from a Command Prompt with ZA
*completely* disabled and the native XP firewall enabled or, just
disconnect from the net while doing the following ?

Start > Run > type in

cmd
Click OK or press Enter

At the Command Prompt, type in the below and press Enter after *each*
command

netsh winsock reset
exit

Restart the system and see if connectivity is restored.
If no joy suggest you start a *free* support case with MS:
For home users, no-charge support is available by calling 1-866-PCSAFETY
in the United States and Canada or by contacting your local Microsoft
subsidiary. For more information about how to contact your local
Microsoft subsidiary for support issues with security updates, visit the
Microsoft International Support Web site:
http://support.microsoft.com/common/international.aspx?rdpath=4 North
American customers can also obtain instant access to unlimited no-charge
e-mail support or to unlimited individual chat support by visiting the
following Microsoft Web site:
http://support.microsoft.com/oas/default.aspx?&prid=7552

Or, not. The decision is entirely yours. As is the decision to install
Zone Alarm and continue using it when other free alternatives are
available that are not toxic to the OS. Here's one:

http://www.tallemu.com/free-firewall-protection-software.html

MowGreen [MVP 2003-2008]
===============
*-343-* FDNY
Never Forgotten
===============


Might read the entire thread from ZA as it was tried by a few and got the
same results as me -no go.


For those experiencing a loss of internet connectivity after installing
KB951748 with Zone Alarm installed as the firewall, here's the fix by a
Zone Alarm moderator:
http://forum.zonelabs.org/zonelabs/board/message?board.id=cfg&message.id=52727


If the windows update changed the usual needed files for
networking/internet, then the ZA will not see
the changes and continue to use the previously known files and ignore
the newer files. Even though the
file names and locations are still the same from before, now the file
size and checksums no longer match.

To solve this, just reset the ZA database and the ZA will be "fresh" as
when it was first installed:

# Boot your computer into the Safe Mode
# Navigate to the c:\windows\internet logs folder
# Delete the backup.rdb, iamdb.rdb, *.ldb and the tvDebug files in the
folder
# Clean the Recycle Bin
# Reboot into the normal mode
# ZA will be just like new with no previous settings or data


Once this is finished, reboot back into the normal mode and in the new
network found windows, set the
new network to Trusted.
Then do this to ensure the ZA is setup properly:

Make sure your DNS and DHCP server IP's are in your Firewall's Trusted
zone. Finding DNS and DCHP servers, etc

1. Go to Run and type in command and hit 'ok', and in the command then
type in ipconfig /all then press the enter key. In the returned data
list will be a line DNS and DHCP Servers with the IP address
(s) listed out to the side. Make sure there is a space between the
ipconfig and the /all, and the font is the same (no capitals).
2. In ZA on your machine on the Firewall, open the Zones tab, click Add
and then select IP Address. Make sure the Zone is set to Trusted. Add
the DNS IP(s) .
3. Click OK and Apply. Then do the same for the DHCP server.
4. The localhost (127.0.0.1) must be listed as Trusted.
5. The Generic Host Process (svchost.exe) as seen in the Zone Alarm's
Program's list must have server
rights for the Trusted Zone.
Plus it must have both Trusted and Internet Access.

Oldsod.


MowGreen [MVP 2003-2008]
===============
*-343-* FDNY
Never Forgotten
===============
 
L

Lord Turkey Cough

Lord Turkey Cough said:
No actually it looks like microshyte has forceably installed this update
with out acking me and how will keep nagging me to restart.
Bastards!!
Ubelieveable.

Could of been me setting the time wronog but it should not auto install them
anyway.
MowGreen said:
For those experiencing a loss of internet connectivity after installing
KB951748 with Zone Alarm installed as the firewall, here's the fix by a
Zone Alarm moderator:
http://forum.zonelabs.org/zonelabs/board/message?board.id=cfg&message.id=52727

If the windows update changed the usual needed files for
networking/internet, then the ZA will not see
the changes and continue to use the previously known files and ignore
the newer files. Even though the
file names and locations are still the same from before, now the file
size and checksums no longer match.

To solve this, just reset the ZA database and the ZA will be "fresh"
as when it was first installed:

# Boot your computer into the Safe Mode
# Navigate to the c:\windows\internet logs folder
# Delete the backup.rdb, iamdb.rdb, *.ldb and the tvDebug files in the
folder
# Clean the Recycle Bin
# Reboot into the normal mode
# ZA will be just like new with no previous settings or data


Once this is finished, reboot back into the normal mode and in the new
network found windows, set the
new network to Trusted.
Then do this to ensure the ZA is setup properly:

Make sure your DNS and DHCP server IP's are in your Firewall's Trusted
zone. Finding DNS and DCHP servers, etc

1. Go to Run and type in command and hit 'ok', and in the command then
type in ipconfig /all then press the enter key. In the returned data
list will be a line DNS and DHCP Servers with the IP address
(s) listed out to the side. Make sure there is a space between the
ipconfig and the /all, and the font is the same (no capitals).
2. In ZA on your machine on the Firewall, open the Zones tab, click
Add and then select IP Address. Make sure the Zone is set to Trusted.
Add the DNS IP(s) .
3. Click OK and Apply. Then do the same for the DHCP server.
4. The localhost (127.0.0.1) must be listed as Trusted.
5. The Generic Host Process (svchost.exe) as seen in the Zone Alarm's
Program's list must have server
rights for the Trusted Zone.
Plus it must have both Trusted and Internet Access.

Oldsod.


MowGreen [MVP 2003-2008]
===============
*-343-* FDNY
Never Forgotten
===============
 
K

Kayman

Been there, done that.
Latest on the ZA forum is to not install KB951748 until they (ZA) come up
with a fix.
So far no fix is out.
Workaround is to move the Internet Zone Security from High to Medium.
It's a coin toss as to who you want to place your trust in at the moment -
MS or ZA.?
Don't gamble with Internet security issues! Stick with MSFT! Uninstall ZA
In its entirety! Use this tool:
http://zonealarm.donhoover.net/uninstall.html

Activate the WinXP f/w and use it in conjunction with SeconfigXP
http://seconfig.sytes.net/

Consider using a LUA for day-to-day use, harden your OS and don't expose
services to public networks.

You'll be glad you did.
 
K

Kayman

LOL.

Relying on Microsoft for security is like employing a pedofile
to look after your children.

Stop spewing and read my post in its entirety, Turkey.
 
L

Lord Turkey Cough

I just recieved an automatic update, I think it was from Zone Alarm
because it looked like the 4 colour ZA logo, although it
is disconcertingly similar to the microshyte logo.

So I think maybe one or the other have sent out a fix?

Then again I could be talking bollocks :O|

Only time will tell.


MowGreen said:
For those experiencing a loss of internet connectivity after installing
KB951748 with Zone Alarm installed as the firewall, here's the fix by a
Zone Alarm moderator:
http://forum.zonelabs.org/zonelabs/board/message?board.id=cfg&message.id=52727


MowGreen [MVP 2003-2008]
===============
*-343-* FDNY
Never Forgotten
===============
 
L

Lord Turkey Cough

Lord Turkey Cough said:
I just recieved an automatic update, I think it was from Zone Alarm
because it looked like the 4 colour ZA logo, although it
is disconcertingly similar to the microshyte logo.

So I think maybe one or the other have sent out a fix?

Then again I could be talking bollocks :O|

Only time will tell.

No actually it looks like microshyte has forceably installed this update
with out acking me and how will keep nagging me to restart.
Bastards!!
Ubelieveable.
MowGreen said:
For those experiencing a loss of internet connectivity after installing
KB951748 with Zone Alarm installed as the firewall, here's the fix by a
Zone Alarm moderator:
http://forum.zonelabs.org/zonelabs/board/message?board.id=cfg&message.id=52727
If the windows update changed the usual needed files for
networking/internet, then the ZA will not see
the changes and continue to use the previously known files and ignore
the newer files. Even though the
file names and locations are still the same from before, now the file
size and checksums no longer match.

To solve this, just reset the ZA database and the ZA will be "fresh" as
when it was first installed:

# Boot your computer into the Safe Mode
# Navigate to the c:\windows\internet logs folder
# Delete the backup.rdb, iamdb.rdb, *.ldb and the tvDebug files in the
folder
# Clean the Recycle Bin
# Reboot into the normal mode
# ZA will be just like new with no previous settings or data


Once this is finished, reboot back into the normal mode and in the new
network found windows, set the
new network to Trusted.
Then do this to ensure the ZA is setup properly:

Make sure your DNS and DHCP server IP's are in your Firewall's Trusted
zone. Finding DNS and DCHP servers, etc

1. Go to Run and type in command and hit 'ok', and in the command then
type in ipconfig /all then press the enter key. In the returned data
list will be a line DNS and DHCP Servers with the IP address
(s) listed out to the side. Make sure there is a space between the
ipconfig and the /all, and the font is the same (no capitals).
2. In ZA on your machine on the Firewall, open the Zones tab, click Add
and then select IP Address. Make sure the Zone is set to Trusted. Add
the DNS IP(s) .
3. Click OK and Apply. Then do the same for the DHCP server.
4. The localhost (127.0.0.1) must be listed as Trusted.
5. The Generic Host Process (svchost.exe) as seen in the Zone Alarm's
Program's list must have server
rights for the Trusted Zone.
Plus it must have both Trusted and Internet Access.

Oldsod.


MowGreen [MVP 2003-2008]
===============
*-343-* FDNY
Never Forgotten
===============
 
L

Lord Turkey Cough

Lord Turkey Cough said:
No actually it looks like microshyte has forceably installed this update
with out acking me and how will keep nagging me to restart.
Bastards!!
Ubelieveable.


start/run/services.msc and then stopping automatic updates seems to
have stopped the 'nag box', and disabled auto restarting my computer.



MowGreen said:
For those experiencing a loss of internet connectivity after installing
KB951748 with Zone Alarm installed as the firewall, here's the fix by a
Zone Alarm moderator:
http://forum.zonelabs.org/zonelabs/board/message?board.id=cfg&message.id=52727

If the windows update changed the usual needed files for
networking/internet, then the ZA will not see
the changes and continue to use the previously known files and ignore
the newer files. Even though the
file names and locations are still the same from before, now the file
size and checksums no longer match.

To solve this, just reset the ZA database and the ZA will be "fresh"
as when it was first installed:

# Boot your computer into the Safe Mode
# Navigate to the c:\windows\internet logs folder
# Delete the backup.rdb, iamdb.rdb, *.ldb and the tvDebug files in the
folder
# Clean the Recycle Bin
# Reboot into the normal mode
# ZA will be just like new with no previous settings or data


Once this is finished, reboot back into the normal mode and in the new
network found windows, set the
new network to Trusted.
Then do this to ensure the ZA is setup properly:

Make sure your DNS and DHCP server IP's are in your Firewall's Trusted
zone. Finding DNS and DCHP servers, etc

1. Go to Run and type in command and hit 'ok', and in the command then
type in ipconfig /all then press the enter key. In the returned data
list will be a line DNS and DHCP Servers with the IP address
(s) listed out to the side. Make sure there is a space between the
ipconfig and the /all, and the font is the same (no capitals).
2. In ZA on your machine on the Firewall, open the Zones tab, click
Add and then select IP Address. Make sure the Zone is set to Trusted.
Add the DNS IP(s) .
3. Click OK and Apply. Then do the same for the DHCP server.
4. The localhost (127.0.0.1) must be listed as Trusted.
5. The Generic Host Process (svchost.exe) as seen in the Zone Alarm's
Program's list must have server
rights for the Trusted Zone.
Plus it must have both Trusted and Internet Access.

Oldsod.


MowGreen [MVP 2003-2008]
===============
*-343-* FDNY
Never Forgotten
===============
 
W

whosbest54

For those experiencing a loss of internet connectivity after installing
KB951748 with Zone Alarm installed as the firewall, here's the fix by a
Zone Alarm moderator:
<snip>

No, that's for different problems. The official temp workarounds from ZA are here:

http://download.zonealarm.com/bin/free/pressReleases/2008/LossOfInternetAccessIssue.html

whosbest54
--
The flamewars are over...if you want it.

Unofficial rec.audio.opinion Usenet Group Brief User Guide:
http://www.geocities.com/whosbest54/

Unofficial rec.music.beatles Usenet Group Brief User Guide:
http://www.geocities.com/whosbest54/rmb.html
 
L

Lord Turkey Cough

Kayman said:
Don't gamble with Internet security issues! Stick with MSFT! Uninstall ZA
In its entirety! Use this tool:
http://zonealarm.donhoover.net/uninstall.html

Activate the WinXP f/w and use it in conjunction with SeconfigXP
http://seconfig.sytes.net/

Consider using a LUA for day-to-day use, harden your OS and don't expose
services to public networks.

You'll be glad you did.


LOL.

Relying on Microsoft for security is like employing a pedofile
to look after your children.
 
L

Lord Turkey Cough

Lord Turkey Cough said:
LOL.

Relying on Microsoft for security is like employing a pedofile
to look after your children.


Just in case there are likely to be any lawsuits flying around, Bill Gates
is not, too my knowledge a pedofile.
 
K

Kayman

Thank them for screwing up Zonealarm?

Do your homework before mouthing off!

ZA's ignorance is inexcusable, their arrogance is shameful!

http://securosis.com/2008/07/08/dan...ue-in-dns-massive-multivendor-patch-released/

....Mr. Kaminsky immediately reported the issue to major authorities,
including the United States Computer Emergency Response Team (part of the
Department of Homeland Security), and began working on a coordinated fix.
Engineers from *major technology vendors* around the world converged on the
Microsoft campus in March to coordinate their response. All of the vendors
began repairing their products and agreed that a synchronized release, on a
single day, would minimize the risk that malicious individuals could figure
out the vulnerability before all vendors were able to offer secure versions
of their products...
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top