| |
MS update KB951748 and ZoneAlarm --- PROBLEMFor those of you using ZoneAlarm who installed the windows updates today, you probably already know that your internet connection has died. It appears that KB951748 made changes to the networking files that ZA doesn't see/recognize.
After two hours of messing around, I found an inelegant solution that will work temporarily ... set the Internet Zone Security permission slider from high to medium. The connection will be restored.
I discovered this after I finally figured out ZA was blocking my internet connections, and turned it off. Once everything worked again as normal, I started playing around and hit on this lowered permission setting.
I imagine the ZA forum will be full of better solutions, but thought this would get you back up and running in the short term. |
|
 Florida Dan
Premium Member
join:2001-07-06
Boynton Beach, FL
1 edit |
Thanks for the heads up winchester73. This is very troubling as I run ZAF on all three of my rigs. Can anyone else confirm this experience and, if so, have you discovered any other workarounds? --
Courage is being scared to death but saddling up anyway.
Edit: It was suggested that I edit my post so that people just getting to this thread do not have to wade through 17 pages looking for the fix.New versions of all Zone Alarm products, which fix the problem of lost Internet access, are available for download at » download.zonealarm.com/b ··· sue.html so upgrade to these before installing hotfix KB951748. If you have already installed the hotfix, proceed as follows: 1) Uninstall hotfix KB951748 via Start>Settings>Control Panel>Add/Remove Programs (be sure to choose the setting to show Windows Updates). 2) Restart your PC. You should now have Internet access restored. 3) Download and install the new version of your ZA product at the above link. 3) Visit Windows Update and run the scan there, which will show that you still need KB951748. Download and install it. HTH |
|
 La LunaFly With The Angels My Beloved Son Chris
Premium Member
join:2001-07-12
New Port Richey, FL
1 edit |
to winchester73
AH HA, so it was one of those updates! Bugger!
It just happened to me when I installed KB951748 and KB951698 on this laptop, and I lost my connection. I uninstalled both (I know, I should have uninstalled one at a time to see which one was the culprit, wasn't thinking) and my connection was restored.
I was going to reinstall both, one at a time, later on to see which one caused the problem. Now I can just reinstall KB951698.
edit: using ZAF |
|
| |
|
|
La LunaFly With The Angels My Beloved Son Chris
Premium Member
join:2001-07-12
New Port Richey, FL |
La Luna
Premium Member
2008-Jul-8 4:49 pm
Posters there are saying that doesn't work. His next idea was to uninstall ZA and reinstall. I'm not doing that, I'm going to hold off on the MS patch. » forum.zonelabs.org/zonel ··· id=52744 |
|
 w8sdz
join:2001-05-21
Port Orange, FL
1 edit |
to winchester73
This might help someone who knows how to debug problems associated with today's MS Update. The following files in the \windows\system32 directory of XP Home (SP3) were replaced: mswsock.dll
dnsapi.dll
vbscript.dll
jscript.dll
The network connectivity problem is most likely caused by the replacement of mswsock.dll. Zone Alarm's Vector service may have to be changed to work correctly with this new dll. |
|
La LunaFly With The Angels My Beloved Son Chris
Premium Member
join:2001-07-12
New Port Richey, FL |
La Luna
Premium Member
2008-Jul-8 4:52 pm
This is the vague explanation: If the windows update changed the usual needed files for networking/internet, then the ZA will not see the changes and continue to use the previously known files and ignore the newer files. Even though the file names and locations are still the same from before, now the file size and checksums no longer match.
To solve this, just reset the ZA database and the ZA will be "fresh" as when it was first installed...» forum.zonelabs.org/zonel ··· id=52727 |
|
w8sdz
join:2001-05-21
Port Orange, FL |
to winchester73
The Microsoft Update also replaced the following driver files on XP Home (SP3): \windows\system32\drivers\afd.sys
\windows\system32\drivers\tcpip.sys
\windows\system32\drivers\tcpip6.sys
|
|
| |
to winchester73
Guess my problem is solved. No download of KB951748 for me till the problem is fixed. I don't need to create problems for myself thanks to you good people having already run the gamut for me. I am using ZASS but have the feeling that ZAF is a good enough test. I don't need to fiddle around with uninstalling and then reinstalling and have only one system to use. I am not about to break it!  |
|
|
Florida Dan
Premium Member
join:2001-07-06
Boynton Beach, FL |
There was a post on the ZA Forum indicating that ZASS is affected as well. |
|
 jadinolfI love you Fred
Premium Member
join:2005-07-09
Ojai, CA |
to winchester73
Add me to the group of folks who are affected. |
|
 MarkAWBarry White
Premium Member
join:2001-08-27
Canada
1 edit |
to winchester73
I have downloaded and installed KB951748 and i use Zone Alarm and as you all can see i am still online with no problems. edit: Don't get me wrong i am not saying that any of you are not having problems but i don't think this warning applys to everyone. |
|
jadinolfI love you Fred
Premium Member
join:2005-07-09
Ojai, CA |
jadinolf
Premium Member
2008-Jul-8 5:47 pm
said by MarkAW:I have downloaded and installed KB951748 and i use Zone Alarm and as you all can see i am still online with no problems. edit: Don't get me wrong i am not saying that any of you are not having problems but i don't think this warning applys to everyone. Hmmmmmmmmm wonder if it would help to install an older version of ZA? Oh well, I installed Comodo until this problem is resolved. |
|
buckw1
Premium Member
join:2001-08-15
Waller, TX |
to winchester73
Commodo had to be told to allow the files also....so if someone has it set to silent, beware. |
|
| |
to MarkAW
Hmmmm. I am now left to wonder if it depends upon which version, True Vector, and driver of ZA, any model, one is rinning. If it works with some and not with others, that leaves all of us up a tree till it's fixed. |
|
| |
Sounds like this will be an issue for a while ... » forum.zonelabs.org/zonel ··· id=52751 |
|
 hurfy
Premium Member
join:2002-08-06
Spokane, WA |
to winchester73
huge multi-vendor patch day for DNS vulnerability perhaps. Every OS and vendor seems to be listed. » securosis.com/2008/07/08 ··· eleased/Even if the instructions for a clean install work i am not repeating it and reenter the license code for 20 computers Seems like the cure is worse than the disease ? Lowering the security setting as alternate fix doesn't sound like more secure to me ... Sounds like something ZA should have been aware of tho :/ Think i'll pass on this one for a bit also. No screaming from the user with auto-update on yet...it installs updates when you shutdown doesn't it? |
|
Florida Dan
Premium Member
join:2001-07-06
Boynton Beach, FL |
to winchester73
From that post--"Okay, the best advice is do a clean uninstall of the ZA and re-install the ZA." To which I say "Faggedaboutit." |
|
 PentangleWith our thoughts we make the world.
Premium Member
join:2006-06-01
Vancouver BC |
to winchester73
I'm running Zone Alarm Free V6.5.737.000, downloaded MS update KB951748 and lost my Internet connection. Worse had to disconnect my Linksys router 'cause even after uninstalling KB951748 the router still won't allow me to connect. Now I'm without router. When oh when will I ever learn to hold off on MS updates until the dust settles in a few days. Any suggestions on how to restore the router? |
|
| |
to winchester73
Yes. Setting ZA internet security to "medium" works. So does uninstalling KB951748 and leaving the ZA internet setting on "high". But either method creates some vulnerability. Which way is less risky? I really don't know. Another workaround might be to initialize the ZA "database" and let the ZA firewall reconfigure itself from scratch. See La Luna's post for a link to the instructions. Or simply uninstall/reinstall ZA - but this is a real pain. |
|
Florida Dan
Premium Member
join:2001-07-06
Boynton Beach, FL |
said by John McD :
Or simply uninstall/reinstall ZA - but this is a real pain.
Yes indeed, a genuine first-class PITA. |
|
jadinolfI love you Fred
Premium Member
join:2005-07-09
Ojai, CA |
jadinolf
Premium Member
2008-Jul-8 7:17 pm
said by Florida Dan:said by John McD :
Or simply uninstall/reinstall ZA - but this is a real pain.
Yes indeed, a genuine first-class PITA. Wonder if it works? |
|
Florida Dan
Premium Member
join:2001-07-06
Boynton Beach, FL |
said by jadinolf:said by Florida Dan:said by John McD :
Or simply uninstall/reinstall ZA - but this is a real pain.
Yes indeed, a genuine first-class PITA. Wonder if it works? I think it will because ZA will detect the new network settings as if it was the first-ever install. |
|
| |
to winchester73
same thing just happened to me, and I'm a relative neophyte, but after 30 minutes of unplugging router, checking our other pc (that still had net access), I figured it out. I can't imagine how many people - and it WILL be thousands - will end up with this problem and not know that it's an update/ZA conflict issue.
For now, I'll keep ZA running and do without the update, which I uninstalled - it's a relief just to know that other people are contending with this and trying to address the problem. I'd hate to ditch ZA for the Windows Firewall. |
|
| |
Reply from a ZA Administrator at their forum: "We are investigating the issue with the MS update KB951748. For the time being we suggest you uninstall KB951748 until the issue has been resolved. We will post when we have more information" » forums.zonelabs.com/zone ··· id=52785Eeks, what to do? Based on that DNS article posted earlier, I think I will leave ZA at Medium and hide behind my router until the dust settles. |
|
Florida Dan
Premium Member
join:2001-07-06
Boynton Beach, FL |
said by winchester73:Eeks, what to do? Based on that DNS article posted earlier, I think I will leave ZA at Medium and hide behind my router until the dust settles. Not sure how many websites you frequent winchester73 but I just might hardwire the IPs of all of my Favorites into the Hosts file and bypass the DNS system for a while. |
|
 gugarci
Premium Member
join:2004-02-25
Lyndhurst, NJ |
to winchester73
Wow!!!!!
Came very close to installing this update. I did a system restore point and almost hit the install button. But decided to check here first. Glad I did as I use an old version of ZA 6.5.737. Now I don't know what to do since I have no plans to update ZA since I used it in conjunction with Linksys router. |
|
| |
to Florida Dan
Yes, I too discovered the same problem and solution with KB951748 and Zone Alarm.
Warren |
|
 swhx7
Premium Member
join:2006-07-23
Elbonia |
to winchester73
The Microsoft naming scheme is overly complex and rather confusing. Here's what I have found out in a few minutes of clicking around. * MS08-037 is the Microsoft patch for the DNS problem discovered by Dan Kaminsky and patched by a bunch of vendors today. * Kb article 951748 at support.microsoft.com/kb/951748 is a kind of umbrella summary of MS08-037. * In the bulletin "for IT professionals" about Ms08-037, and also in the "home user" version of the bulletin, and again in the monthly summary for IT folks, ms08-037 is identified as 953230 and '951748' is not used. The DNS vulnerability is serious and one cannot "hide behind a router" as one poster mentioned; in web use or other internet activity you're probably making DNS requests all the time. Therefore I would suggest keeping the patch and using a different local firewall for application control, or adjusting ZA to "medium" - then it's fine to rely on the firewall in the router. |
|
| |
to winchester73
I have XP Home and I uninstalled KB951748, rebooted and all is well. |
|
