KB951748 security update blocked my internet completely today. Grrr

C

Charles Lee

My internet was blocked completely by the last security update....
yesterday, I was fine....

I have 3 pc's on a home network, all on xp...

2 of them, I let update with the latest offering from ms... the security
update KB951748...

then I lost all connectivy to the net via my router upon reboot, except for
the pc I didn't update...

pc number 2, I recovered via system restore, back to yesterday... all became
fine again...


with my main pc, I had not any restore points.... so had to remove the
update via 'add/remove' which then killed off 2 programs after uninstalling,
which I then had to reinstall.... yawn....

after removing KB951748, my internet connection came back to me, like a
faithful dog, no probs... phew....



is there a way to install this update & adjust it so internet stays working,
or....
should this update be avoided altoogether...???????
 
T

TaurArian

| My internet was blocked completely by the last security update....
| yesterday, I was fine....
|
| I have 3 pc's on a home network, all on xp...
|
| 2 of them, I let update with the latest offering from ms... the security
| update KB951748...
|
| then I lost all connectivy to the net via my router upon reboot, except for
| the pc I didn't update...
|
| pc number 2, I recovered via system restore, back to yesterday... all became
| fine again...
|
|
| with my main pc, I had not any restore points.... so had to remove the
| update via 'add/remove' which then killed off 2 programs after uninstalling,
| which I then had to reinstall.... yawn....
|
| after removing KB951748, my internet connection came back to me, like a
| faithful dog, no probs... phew....
|
|
|
| is there a way to install this update & adjust it so internet stays working,
| or....
| should this update be avoided altoogether...???????
|


If you're using ZA - you should read this -

Zone Alarm & KB951748 Workaround:
http://forum.zonelabs.org/zonelabs/board/message?board.id=cfg&message.id=52727



xposted to the Windows Update Newsgroup for your convenience.




--

TaurArian [MVP] 2005-2009 - Update Services
http://taurarian.mvps.org
======================================
How to ask a question: http://support.microsoft.com/kb/555375
Computer Maintenance: Acronis / Diskeeper / Paragon / Raxco
 
C

Charles Lee

as it happens, I am using ZA security suite...

many thanks for the quick response...

best I certainly give it a go, thats as soon as my head clears from this
last mind-game... haa...
 
R

Roger Overunder

TaurArian said:
| is there a way to install this update & adjust it so internet stays working,
| or....
| should this update be avoided altoogether...???????
|

If you're not quite up to do the suggested work around, TaurArian, you can
set ZoneAlarm to "Medium" security instead of "High". You should be able to
connect okay on Medium.

Or you can leave KB951748 uninstalled, keep the ZoneAlarm High settings and
wait for a patch, fix or update to be issued for this bug.

best wishes.
 
P

PeterOK

I had this Internet blockage problem today as well. Removed the update and
connection was restored.
Thing is, I dont have ZoneAlarm running on my machine.
Unless it also effects corporate network devices further up the change.

Rgds
Peter
 
L

Lin Chung

Roger said:
http://forum.zonelabs.org/zonelabs/board/message?board.id=cfg&message.id=52727
...you can set ZoneAlarm to "Medium" security...
Or you can leave KB951748 uninstalled, keep the ZoneAlarm High
settings and wait for a patch, fix or update to be issued for this bug.



After a download (set automatically) of KB951748 and KB890830 this morning,
my Free Download Manager failed: the active item (the file set to be
downloaded) was highlighted on the Control Console with an orange arrow as
usual but there was no activity to follow. The whole morning was spent in
an attempt to track down the fault. Eventually I had to resort to a System
Restore recovery. Thank goodness, someone has reported the same (I also use
ZoneAlarm). So, it appears that the culprit was KB951748 then.

The corrective measure as advised in the link is just too involved. Thanks
to TaurArian all the same. I'll wait for a fix from Microsoft, meanwhile my
ZoneAlarm is set to "Medium" security.

I must add I was surprised that happened, viz. there was inadequate
compatibility checking with popular installed software. Microsoft have been
very good in their updates in recent years, or more precisely after SP2.
 
L

Lin Chung

Lin said:
...The corrective measure as advised in the link is just too involved.
Thanks
to TaurArian all the same. I'll wait for a fix from Microsoft, meanwhile
my
ZoneAlarm is set to "Medium" security.



Sorry, I mean I'll wait for the fix and leave ZoneAlarm intact!
 
V

Victoria V.

Thank you!!!! I thought I'd awakened this morning to the computer Twilight
Zone!! I couldn't believe that all 4 PCs would die overnight. I agree that,
while I'm not afraid of computers, the suggested work-around is just too
involved, and I'd have to do it 4 times. Luckily my laptop doesn't have Zone
Alarm on it, so I was able to log in just fine and found the suggestion about
the ZA reset to "medium." That suggestion worked like a charm!! All PCs are
up and running and updating as they should.

I also went in and changed the update settings on all of the machines to
download updates, but not to automatically load them. [I'll do it.]

Leave it to Microsoft to leave out a major plug-in to fix compatibility with
a very widely-used piece of software!!


As previously stated, I hope a ne
 
R

Roger Overunder

Lin Chung wrote:
Sorry, I mean I'll wait for the fix and leave ZoneAlarm intact!
==============

That was my choice too, Lin Chung. To use those settings and wait a few days
for MS/ZoneAlarm to figure out how to solve the problem.
 
R

Roger Overunder

:
I thought I'd awakened this morning to the computer Twilight
Zone!!"

Yeah, not the best way to start one's morn! Even if you're a Rod Serling
fan! :)


"I also went in and changed the update settings on all of the machines to
download updates, but not to automatically load them. [I'll do it.]"

I think that's the only way to go.

Even better is to go the Update page when you get update notice and do the
downloading from there 'cause you can get a better idea of what's what & see
your download history, including the ones you just downloaded. That way you
know the names of the little guys you just downloaded and have an idea of
which one might be the culprit in a similiar situation.
 
M

MowGreen [MVP]

Although this update is listed as Important, the DNS issue is being
addressed by *many* other Vendors issuing a patch for it :
http://www.doxpara.com/?p=1162
Specifically:

1) It’s a bug in many platforms

2) It’s the exact same bug in many platforms (design bugs, they are a pain)

3) After an enormous and secret effort, we’ve got fixes for all major platforms, all out on the same
day.

4) This has not happened before. Everything is genuinely under control.

I’m pretty proud of what we accomplished here. We got Windows. We got Cisco IOS. We got Nominum. We
got BIND 9, and when we couldn’t get BIND 8, we got Yahoo, the biggest BIND 8 deployment we knew of,
to publicly commit to abandoning it entirely.

*PLEASE* take the time to read the article. There's also a DNS Checker
available on the above page that shows if KB951748 has resolved the
vulnerability.

To push out all the updates/patches at the same time is quite remarkable
and, I think, unheard of when it comes to one specific Vuln.

MowGreen [MVP 2003-2008]
===============
*-343-* FDNY
Never Forgotten
===============



Roger said:
:
I thought I'd awakened this morning to the computer Twilight
Zone!!"

Yeah, not the best way to start one's morn! Even if you're a Rod Serling
fan! :)


"I also went in and changed the update settings on all of the machines to
download updates, but not to automatically load them. [I'll do it.]"

I think that's the only way to go.

Even better is to go the Update page when you get update notice and do the
downloading from there 'cause you can get a better idea of what's what & see
your download history, including the ones you just downloaded. That way you
know the names of the little guys you just downloaded and have an idea of
which one might be the culprit in a similiar situation.
 
V

Victoria V.

Absolutely!! I'm not going to use auto-update EVER again!! What a mess.
I've spent the last 6+ hours on this fiasco. Anyway, All machines are
working just fine...Just wanted to pass along a note for all those who are
using Zone Alarm.

ZA says NOT to reduce your Internet Zone Security to "medium." The gurus on
their message boards say to leave the setting on "high" (to avoid other nasty
buggers), and to go into your Control Panel, select Add/Remove Programs (make
sure to have "show updates" checked), and remove/uninstall the offending
update. You'll have to reboot (make sure your ZA is set on high just to be
safe before you do this), and you should be all set once your system has
rebooted. The nasty yellow shield shows up at the bottom of your screen, but
at least your internet connections work again.

If anyone knows how to get rid of the yellow shield, I'd love to know. I've
already killed half of my day fixing this mess, might as well blow off the
rest of the day!!! :blush:)
 
C

Charles Lee

1.. Click the Start Menu
2.. Click the Settings menu
3.. Click on Add or Remove Programs
4.. On the top of the add/remove programs dialog box, you should see a
checkbox that says "show updates". Select this checkbox
5.. Scroll down until you see "Security update for Windows (KB951748)"
6.. Click remove to uninstall the hotfix
 
R

Roger Overunder

Another option, Charles Lee -

1. Click Start Menu
2. Click "Run"
3. Copy and Paste the below in the "Run" field:

C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe

(hope that line displays okay in this post!)

4. Then restart the PC..

I believe that should do the job just fine.

===========================
 
V

Victoria V.

That's weird. The posted link for the ZA "bulletin" contained the option to
change your setting from "high" to "medium." That's what I did at first,
until I saw this posting from the Zone Alarm Forum Moderator:

"We have been working with MS over night on the issue. We are very confident
a fix will be released soon. As far as how that is distributed either a patch
from MS or in the form of a new build from ZA has not been determined.

We will notify all users of a fix when its ready at the top of the forum in
the main announcements section.

We also still stand by our current workaround that you should uninstall the
MS update KB951748 and do not set your ZA internet security level to Medium.
By setting to Medium you potential expose your computers to a huge number of
other threats than just the one that this patch from MS fixes.

Forum Moderator"

Well, I guess we're all in advice overload, but at least the powers-that-be
at ZA and Microsoft are working on this. I went the "uninstall KB951748"
route and put all of our ZA settings back on high. I did the same steps that
"Charles Lee" recommended for the uninstall, although "Roger Overunder's" way
seems much faster. Either way, "Kim", you should be up and running once the
uninstall is complete. Make sure to reboot! :blush:)

So far, so good for all of our PCs...

BTW, there's a lot of chatter on the ZA message boards about multiple patch
releases today for this problem from a number of companies. Apparently this
patch has been in the works for some time, and all fixes were launched the
same day (yesterday). Wonder what's going on?...
 
T

TaurArian

Thanks Roger but I'm not the one with the problem. I was cross posting Charles Lee's post.
Personally I wouldn't use ZA.

--

TaurArian [MVP] 2005-2009 - Update Services
http://taurarian.mvps.org
======================================
How to ask a question: http://support.microsoft.com/kb/555375
Computer Maintenance: Acronis / Diskeeper / Paragon / Raxco


| "TaurArian" wrote:
|
| > | is there a way to install this update & adjust it so internet stays working,
| > | or....
| > | should this update be avoided altoogether...???????
| > |
|
| If you're not quite up to do the suggested work around, TaurArian, you can
| set ZoneAlarm to "Medium" security instead of "High". You should be able to
| connect okay on Medium.
|
| Or you can leave KB951748 uninstalled, keep the ZoneAlarm High settings and
| wait for a patch, fix or update to be issued for this bug.
|
| best wishes.
|
| >
| > If you're using ZA - you should read this -
| >
| > Zone Alarm & KB951748 Workaround:
| > http://forum.zonelabs.org/zonelabs/board/message?board.id=cfg&message.id=52727
| >
| >
| >
| > xposted to the Windows Update Newsgroup for your convenience.
| >
| >
| >
| >
| > --
| >
| > TaurArian [MVP] 2005-2009 - Update Services
| > http://taurarian.mvps.org
| > ======================================
| > How to ask a question: http://support.microsoft.com/kb/555375
| > Computer Maintenance: Acronis / Diskeeper / Paragon / Raxco
| >
| >
| >
 
A

Aaron W

FWIW, I did the update on one computer without problems. The other computer,
however, was fubar'd. Of course, both computers are running zone alarm suite
and XP SP3. So I'm not sure why one went kaput while the other is going
strong.

Victoria V asked how to remove the little yellow shield that keeps telling
you to install updates.

This is how I did it. First, I went to Start --> Run --> (then typed in)
services.msc --> hit OK, double clicked on "Automatic Updates", clicked on
Stop. Then, for good measure, I went to Start --> Control Panel --> double
clicked on automatic Updates and set t to "Notify me but don't automatically
download or install them".

Then, I went to Start --> Run --> (then typed in)
%windir%\SoftwareDistribution --> hit OK. I first opened the Download folder
and deleted everything in it. This didn't seem to do the trick, so I then
went through every folder in this subdirectory and deleted any file that was
modified on the date that the faulty update was downloaded (July 9, 2008 for
me). Once every file was deleted, I emptied the recycle bin and rebooted the
computer.

Voila! no more small yellow shield. I actually did this whole process a few
times as I was going on the idea that the download had been corrupted. This
is the method I have used in the past to delete the stored download of a MS
patch so I can re-download it. But now I realize it was not necessarily a
corruption during the download but an overall bug in the patch.

Victoria V. said:
Absolutely!! I'm not going to use auto-update EVER again!! What a mess.
I've spent the last 6+ hours on this fiasco. Anyway, All machines are
working just fine...Just wanted to pass along a note for all those who are
using Zone Alarm.

ZA says NOT to reduce your Internet Zone Security to "medium." The gurus on
their message boards say to leave the setting on "high" (to avoid other nasty
buggers), and to go into your Control Panel, select Add/Remove Programs (make
sure to have "show updates" checked), and remove/uninstall the offending
update. You'll have to reboot (make sure your ZA is set on high just to be
safe before you do this), and you should be all set once your system has
rebooted. The nasty yellow shield shows up at the bottom of your screen, but
at least your internet connections work again.

If anyone knows how to get rid of the yellow shield, I'd love to know. I've
already killed half of my day fixing this mess, might as well blow off the
rest of the day!!! :blush:)



Roger Overunder said:
:
I thought I'd awakened this morning to the computer Twilight
Zone!!"

Yeah, not the best way to start one's morn! Even if you're a Rod Serling
fan! :)


"I also went in and changed the update settings on all of the machines to
download updates, but not to automatically load them. [I'll do it.]"

I think that's the only way to go.

Even better is to go the Update page when you get update notice and do the
downloading from there 'cause you can get a better idea of what's what & see
your download history, including the ones you just downloaded. That way you
know the names of the little guys you just downloaded and have an idea of
which one might be the culprit in a similiar situation.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top