Found this out this morning..


Just letting people know that if you are running Zone Alarm firewall software your internet connection may stop working..

This is caused by a Microsoft update KB951748..

You can uninstall the update to get it working again..

Another reason why I do not use automatic updates..

Another quality job by Microsoft software geniuses...

I don't know if affects any other firewall software programs..

 

Don,


You're my hero!!!!!!!!

I had this very thing happen to me last night.
The only way to get back online (quickly) was to shut down ZoneAlarm!


Rep points coming your way!!!!
EDIT: The system says that I have to spread the rep point around before I can give them to you again.
So, can someone send some POSITIVE rep points to Don, for me!?!?!?!?!??




Keith

 

Glad I could help..

Just had a customer run into that this morning..

My pc notified me about that update, but I had not installed it yet..

 

I've got my laptop set to download the updates, but, I select which ones and when to install.

IE 7 was a Piece of Junk, so, that was uninstalled, and that MS update last night cost me some $$$ on a business transaction, because I wasn't paying attention to what I was allowing to install.

Oh well. . . I got the $$$ back this morning.


Thanks again for the tip. I will uninstall that update this evening!

 

Keith...I sent my friend Don some rep on your behalf!!!

 

Open ZoneAlarm, click on firewall (left side), click on Main tab & set the Internet Security Zone to medium (from high) & you will connect to the internet right away.

 

Thanks, BIGKEN!!!!!!!!

 

I did that, and I'm back on! (On the laptop, now.)
I personally like my firewall set 'tight'.

I couldn't see any way to uninstall the update that Don quoted, so, I put in an e-mail request to MS.
They state that they will respond within 24 hours.

 

If it is not in the add/remove programs you can manuall remove it by going to the windows directory..

There will be a directory simmilar to this $NtUninstallKB873339$.. Find The last numbers that match KB951748.. Then there will be a spuninst_exe that you can run to remove it..

It may be under the directory $hf_mig$ under Windows..

Note you need to turn on the option to see hidden files and folders in order to see it..

 

I am glad you are back on OK. I don't blame you for wanting High security vs. Medium security. I am behind a router as well & am reasonably secure. I have had no trogans or virus in the last couple years on 5 computers. The last trogan I had was due to my own unbelievable stupidity (It was not one of my better days). I downloaded a Bit Torrent file that was infected (Avast alerted me) & opened it with a double click instead of deleting.

 

There is an official Zone Alarm press release on the issue and they have an update..

Here is a link..

ZoneAlarm SmartDefense Research Center

 

Well, MS was of no help in removing their update, at their customer support site.
Here is the correspondence.

Here is my reply from MS:

Hello Mr. 00BlueOvalRanger,
Thank you for contacting Microsoft Customer Service.
<O</O
I understand from that you are unable to connect to the Internet after installing KB951748.
<O</O
I recommend that you contact our Support <?xml:namespace prefix = st1 ns = "urn:schemas-microsoft-comSecurity</st1:PlaceName> <st1:PlaceName w:st=" /><st1:PlaceType w:st="on">Center</st1:PlaceType> for best assistance. Please note that Security-related product support is now available at no-charge to all customers through Microsoft™ Strategic Technology Protection Program (STPP). To access this service, please call the STPP toll-free number at (866) PC SAFETY (866-727-2338). This service is available 24 hours a day.
<O</O
You can also contact the PCSafety team via email or chat to resolve your issue. Please visit the following web link to contact them:
http://support.microsoft.com/oas/default.aspx?Gprid=13297
I hope the above information is helpful. <O
<O</O
Thank you,
<O</O
<st1:PersonName w:st="on">Roshi</st1:PersonName>
Microsoft Customer Service Representative


Original Message:
--- Original Message ---
From : 00BlueOvalRanger
Sent : 09 July 2008 22:21:05 UTC

Subject : Cannot access internet after MS Update on 7/08/2008

E-mail Contact Only: Please correspond with the customer using e-mail as the customer will not be able to check responses online. This is because customer submitted incident without Windows Live ID.
Problem Description: Computer automatically downloaded MS Updates on 7/08/2008.
I initiated install shortly after download.
I cannot access the internet after update UNLESS I shutdown Zone Alarm Firewall.
I have talked to others and one person says that I should uninstall MS Update KB951748.
I cannot find uninstaller.
I have searched this update center and there is reference to "WindowsXP-KB951748-x86-ENU"

I would like to have control of my computer again and want to use Zone Alarm firewall.
How do I uninstall this (your) UNwanted update??
Thank you in advance.

00BlueOvalRanger_at_emailaddressblahblahblah
Operating System: WindowsXP



Kudos to donjamer and lswartz. They are more helpful than the OS's support team!

 

Don't uninstall this update. Back in April a well known security consultant found a major hole in DNS services, and DNS servers all over are vunerable. He quietly notified many companies and they made a secret group effort to all put out patches for this on the same day.

Guess who didn't put out a patch? The Zone Alarm folks. Its not Microsoft's fault. If you want to check to see if your ISP's DNS server is still vunerable click here:

securosis.com

It will do a DNS query and will let you know the results.

(Edit: Link no longer contains the test... I guess because it was pretty much showing every DNS server out there as vunerable.)

 

I use FireFox (just recently updated to 3) as my default browser instead of IE 7. Yet my MS updates are automated and installed....up til now. I have Zone Alarm Free as my firewall

So After the latest MS updates were automatically downloaded and installed, I rebooted to find....no internet. Could get online but was stalled/"Log jammed". Checked my satellite connection as I thought WB was going through one of its periodic maintenance...nope. Then switched to dialup ....nothing. Only by turning off my ZA firewall would my internet start going either way. Switched on my Windows Firewall.

So went to the ZoneAlarm forums to find out what "gives"? Read about the problem and all the guru info there. Decided to reset my Firewall to Medium at first, so far so good. But really prefer "High".

Went to Add/Remove Programs and clicked on "show updates". Found the 951748 and removed it. However, my MS shield was telling me a new update was ready to be installed. In other words, it would reinstall the offending 951748. So went to my Windows Security and turned off "Automatic updates" for now. This caused the "red warning shield to show up (Automatic updates recommended) But at this point, I prefer to check the MS update page and download manually.

Especially since the SP 3 is due out soon and this is going to be a big download. Prefer to do this through dialup which may take longer...but do not want to send my son's WB FAP up any more than needed to be right now.

I do understand why this DNS security plug is needed and should have been done a long time ago though.

Reset my Zone Alarm back to High.

That was Wednesday. Thursday (yesterday) Zone Alarm has released a patch. Later, I will update my present version and only after that....reinstall the 951748 DNS patch.

 

I use COMODO firewall and have not had any problems.Great protrction for free,just as good or better then ZoneAlarm.

JMO.