  kelvin
@com.hk | reply to MarkAW Re: MS update KB951748 and ZoneAlarm --- PROBLEM
Your ZoneAlarm is an old version. The latest version should be 7.x |
|
  Siko Premium join:2006-11-27 Mechanicsburg, PA clubs: | reply to winchester73 Ok, so this was the problem. I thought another update was the problem so I did a system restore to restore my update. Tomorrow I'll set the security permission slider to medium and lets see if it can restore the internet connection. |
|
  MarkAW Barry White or lil bratt Premium join:2001-08-27 Canada
·Bell Sympatico
·Cogeco Cable
| reply to kelvin said by kelvin :
Your ZoneAlarm is an old version. The latest version should be 7.x I know my ZA is a old version and that the latest version is 7.x , why do you think i am not having the problems others are having. -- Advertising is legalized lying. - H.G. Wells Pleasure in the job puts perfection in the work. - Aristotle |
|
  gugarci Premium join:2004-02-25 Bergen Co | reply to winchester73 Which version of ZA do you use??? I have an old version also and since I use a router have no plans to update. |
|
  Inkognito
@comcast.net | reply to winchester73 I had the same issue with that MS update and Zonealarm. I tried all solutions, and only thing I could do to get my Internet back was to uninstall the update. Well done MS. |
|
  Disblows
@comcast.net
| said by Inkognito :
I had the same issue with that MS update and Zonealarm. I tried all solutions, and only thing I could do to get my Internet back was to uninstall the update. Well done MS. How do I do that?
I have the exact same problem. I can only access the internet by setting ZA internet security to 'medium.' |
|
  Disblows
@comcast.net
| reply to winchester73 said by winchester73 :For those of you using ZoneAlarm who installed the windows updates today, you probably already know that your internet connection has died. It appears that KB951748 made changes to the networking files that ZA doesn't see/recognize. After two hours of messing around, I found an inelegant solution that will work temporarily ... set the Internet Zone Security permission slider from high to medium. The connection will be restored. I discovered this after I finally figured out ZA was blocking my internet connections, and turned it off. Once everything worked again as normal, I started playing around and hit on this lowered permission setting. I imagine the ZA forum will be full of better solutions, but thought this would get you back up and running in the short term. Okay. Uninstalling KB951748 does work. It allows you to set ZA to high settings and access the net.
I've turned off XP update notifications and automatic updates until this problem gets resolved.
The alternative (setting ZA internet settings to 'medium') is way too unacceptable. |
|
  w8sdz
join:2001-05-21 Port Orange, FL
| reply to winchester73 Do not uninstall the KB951748 update. It's VERY important.
Fixes Released for Massive Internet Security Issue
On July 8th, technology vendors from across the industry will simultaneously release patches for their products to close a major vulnerability in the underpinnings of the Internet. While most home users will be automatically updated, its important for all businesses to immediately update their networks. This is the largest synchronized security update in the history of the Internet, and is the result of hard work and dedication across dozens of organizations.
Details here:
»securosis.com/2008/07/08/dan-kam···eleased/
It's far better to run ZoneAlarm in the Medium setting because the DNS poisoning issue can cause your browser to be sent to bad sites. -- 73 de w8sdz - sip:271752@fwd.pulver.com |
|
  Disblows
@comcast.net
| said by w8sdz :Do not uninstall the KB951748 update. It's VERY important. Fixes Released for Massive Internet Security Issue On July 8th, technology vendors from across the industry will simultaneously release patches for their products to close a major vulnerability in the underpinnings of the Internet. While most home users will be automatically updated, its important for all businesses to immediately update their networks. This is the largest synchronized security update in the history of the Internet, and is the result of hard work and dedication across dozens of organizations. Details here: »securosis.com/2008/07/08/dan-kam···eleased/
It's far better to run ZoneAlarm in the Medium setting because the DNS poisoning issue can cause your browser to be sent to bad sites. Why?
Don't you have to be specifically targeted with the DNS cache poisoning (it's the same issue, different day, right)?
If so, I'd rather surf with a decent modicum of blanket security, than allow my computer resources to be shared.
Am I wrong? |
|
  gugarci Premium join:2004-02-25 Bergen Co 1 edit | reply to winchester73 To play it safe I've chosen to hide that update. Don't want my wife to accidentally install it. Eventhough I have a sticky by the PC with a "DO NOT INSTALL KB951748".  |
|
  Disblows
@comcast.net
| said by gugarci :To play it safe I've chosen to hide that update. Don't want my wife to accidentally install it. Eventhough I have a sticky by the PC with a "DO NOT INSTALL KB951748". Turn off Microsoft Automatic Updates and Security Alerts until they work the compatibility out (who knows how long that will be). |
|
  w8sdz
join:2001-05-21 Port Orange, FL
2 edits | reply to winchester73 Dan Kaminsky will be elaborating much further on the DNS discovery and the solution at Black Hat USA 2008 (August 2-7) in Las Vegas. Let's hope that Microsoft and ZoneAlarm have fixed the KB951748 incompatibilities by that date. If not, the hackers will then have the information they need to exploit our PCs.
Details here (on the right side of the page):
»www.blackhat.com/
-- 73 de w8sdz - sip:271752@fwd.pulver.com |
|
  Houston TX
@swbell.net | reply to John McD I was also hit by installing the update.
I uninstalled it via the Control Panel | Add/Remove Programs, rebooted the computer and I had Internet access again. |
|
  redxii too big to fail Premium,Mod join:2001-02-26 Texas | reply to winchester73 Fine on my 2 PCs, but I'm not using ZoneAlarm.
Perhaps ZoneAlarm should be fixed. No one should have to fix it for them. |
|
  dvd536 as Mr. Pink as they come Premium join:2001-04-27 Phoenix, AZ | reply to winchester73 Any problem with NIS 2008 with this update? |
|
  Owlbet Ignite the Ice Premium,MVM join:2002-09-24 Palmer, AK clubs: | On Vista or XP?
I use NIS 2008 on two updated Vista computers and I've had no problems on either machine. |
|
  altermatt Premium join:2004-01-22 White Plains, NY
·Verizon Online DSL
| reply to La Luna said by La Luna :To solve this, just reset the ZA database and the ZA will be "fresh" as when it was first installed Does this really work? If so, it is a HECK of a lot easier to just nuke the databases than to reinstall the whole program, and a HECK of a lot safer than setting the internet zone to medium.
Is Online Armor affected? I've been meaning to switch for a while, since my ZAPro updates expired, and this might be the motivation. -- The truth of a thing is the feel of it, not the think of it. -- Stanley Kubrick |
|
  Cudni La Merma - Vigilado Premium,MVM join:2003-12-20 Someshire
1 edit | reply to La Luna said by La Luna :This is the vague explanation: If the windows update changed the usual needed files for networking/internet, then the ZA will not see the changes and continue to use the previously known files and ignore the newer files. Even though the file names and locations are still the same from before, now the file size and checksums no longer match. Vague indeed. Surely ZA would then prompt on the new files if changed. This issue might go deeper into how ZA is working
edit: an added rule might help »www.castlecops.com/article-6916-···0-0.html ".. According to the German site Heise Security the problem lies in the personal firewall expecting dns queries only from one udp port. The windows update randomizes the source port for udp queries. Heise Security suggests an allow rule for the firewall, which allows udp-packets from any port to port 53 of the dns server and the respective answers. .."
Cudni -- "Mercifully, he hit him with the soft end of the pistol." Help yourself so God can help you. Microsoft MVP, 2006 - 2008 |
|
  IsNotImportant
@hetnet.nl
| reply to winchester73 With regard to zonealarm: what worked for me is lowering the Zonealarm level: for internet from "High/stealth" to "Medium/visible but protected".
So for those who when choosing between "KB or Zone" choose "dump Zone", there is another option... |
|
  Tude
@net.au
| reply to winchester73 I have two machines - one with XP Home and other with XP Pro (both SP3 and ZA). I could not access the internet through browser (IE 7 and Opera 9.51) on either machine after installing KB951748 but could successfully ping one site at least (I only tried google.com.au). Anyway the Home machine appeared to fix itself after a couple of re-boots but I had to uninstall KB51748 to get the Pro machine to work. |
|