Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Up and Running » Security » Security » MS update KB951748 and ZoneAlarm --- PROBLEM
Search Topic:
Uniqs:
122637
Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Post a:
Post a:
Security researchers warn of new 'clickjacking' browser bugs »
« Privacy Survey Urged for Counterterror Programs  
page: 1 · 2 · 3 · 4 ...23 · 24 · 25
AuthorAll Replies

winchester73

join:2003-08-08
Chapel Hill, NC

MS update KB951748 and ZoneAlarm --- PROBLEM

For those of you using ZoneAlarm who installed the windows updates today, you probably already know that your internet connection has died. It appears that KB951748 made changes to the networking files that ZA doesn't see/recognize.

After two hours of messing around, I found an inelegant solution that will work temporarily ... set the Internet Zone Security permission slider from high to medium. The connection will be restored.

I discovered this after I finally figured out ZA was blocking my internet connections, and turned it off. Once everything worked again as normal, I started playing around and hit on this lowered permission setting.

I imagine the ZA forum will be full of better solutions, but thought this would get you back up and running in the short term.


FiOS Dan
Premium
join:2001-07-06
Redondo Beach, CA
·Verizon FIOS


1 edit
Thanks for the heads up winchester73. This is very troubling as I run ZAF on all three of my rigs. Can anyone else confirm this experience and, if so, have you discovered any other workarounds?
--
Courage is being scared to death but saddling up anyway.


Edit: It was suggested that I edit my post so that people just getting to this thread do not have to wade through 17 pages looking for the fix.

New versions of all Zone Alarm products, which fix the problem of lost Internet access, are available for download at »download.zonealarm.com/bin/free/···sue.html so upgrade to these before installing hotfix KB951748. If you have already installed the hotfix, proceed as follows:

1) Uninstall hotfix KB951748 via Start>Settings>Control Panel>Add/Remove Programs (be sure to choose the setting to show Windows Updates).

2) Restart your PC. You should now have Internet access restored.

3) Download and install the new version of your ZA product at the above link.

3) Visit Windows Update and run the scan there, which will show that you still need KB951748. Download and install it.

HTH


La Luna
Surviving Ashraful
Premium
join:2001-07-12
Warwick, NY
clubs:
·Optimum Online
·Vonage


1 edit
reply to winchester73
AH HA, so it was one of those updates! Bugger!

It just happened to me when I installed KB951748 and KB951698 on this laptop, and I lost my connection. I uninstalled both (I know, I should have uninstalled one at a time to see which one was the culprit, wasn't thinking) and my connection was restored.

I was going to reinstall both, one at a time, later on to see which one caused the problem. Now I can just reinstall KB951698.

edit: using ZAF
--
11,407 DEADLY TERROR ATTACKS SINCE 9/11~~SARAH BRIGHTMAN SYMPHONY WORLD TOUR

winchester73

join:2003-08-08
Chapel Hill, NC

reply to winchester73
Sampling of problems at the ZA forum:

»forums.zonelabs.com/zonelabs/boa···d.id=cfg

»forums.zonelabs.com/zonelabs/boa···d=access

Oldsod suggests this "reset": »forum.zonelabs.org/zonelabs/boar···id=52727


La Luna
Surviving Ashraful
Premium
join:2001-07-12
Warwick, NY
clubs:
·Optimum Online
·Vonage

said by winchester73 See Profile :

Oldsod suggests this "reset": »forum.zonelabs.org/zonelabs/boar···id=52727
Posters there are saying that doesn't work. His next idea was to uninstall ZA and reinstall. I'm not doing that, I'm going to hold off on the MS patch.

»forum.zonelabs.org/zonelabs/boar···id=52744
--
11,407 DEADLY TERROR ATTACKS SINCE 9/11~~SARAH BRIGHTMAN SYMPHONY WORLD TOUR


w8sdz

join:2001-05-21
Port Orange, FL


1 edit
reply to winchester73
This might help someone who knows how to debug problems associated with today's MS Update. The following files in the \windows\system32 directory of XP Home (SP3) were replaced:
mswsock.dll
dnsapi.dll
vbscript.dll
jscript.dll
The network connectivity problem is most likely caused by the replacement of mswsock.dll. Zone Alarm's Vector service may have to be changed to work correctly with this new dll.
--
73 de w8sdz - sip:271752@fwd.pulver.com


La Luna
Surviving Ashraful
Premium
join:2001-07-12
Warwick, NY
clubs:
·Optimum Online
·Vonage

This is the vague explanation:

If the windows update changed the usual needed files for networking/internet, then the ZA will not see the changes and continue to use the previously known files and ignore the newer files. Even though the file names and locations are still the same from before, now the file size and checksums no longer match.

To solve this, just reset the ZA database and the ZA will be "fresh" as when it was first installed...


»forum.zonelabs.org/zonelabs/boar···id=52727
--
11,407 DEADLY TERROR ATTACKS SINCE 9/11~~SARAH BRIGHTMAN SYMPHONY WORLD TOUR


w8sdz

join:2001-05-21
Port Orange, FL

reply to winchester73
The Microsoft Update also replaced the following driver files on XP Home (SP3):
\windows\system32\drivers\afd.sys
\windows\system32\drivers\tcpip.sys
\windows\system32\drivers\tcpip6.sys
--
73 de w8sdz - sip:271752@fwd.pulver.com


jaykaykay
4 Ever Young
Premium,MVM
join:2000-04-13
Scottsdale, AZ
·Speakeasy

reply to winchester73
Guess my problem is solved. No download of KB951748 for me till the problem is fixed. I don't need to create problems for myself thanks to you good people having already run the gamut for me. I am using ZASS but have the feeling that ZAF is a good enough test. I don't need to fiddle around with uninstalling and then reinstalling and have only one system to use. I am not about to break it!


FiOS Dan
Premium
join:2001-07-06
Redondo Beach, CA
There was a post on the ZA Forum indicating that ZASS is affected as well.
--
Courage is being scared to death but saddling up anyway.


jadinolf
I love you Fred
Premium
join:2005-07-09
Ojai, CA
reply to winchester73
Add me to the group of folks who are affected.
--
This post printed on 100% recycled bytes


MarkAW
Barry White or lil bratt
Premium
join:2001-08-27
Canada
·Bell Sympatico
·Cogeco Cable


1 edit
reply to winchester73
Click for full size
I have downloaded and installed KB951748 and i use Zone Alarm and as you all can see i am still online with no problems.

edit: Don't get me wrong i am not saying that any of you are not having problems but i don't think this warning applys to everyone.
--
Advertising is legalized lying. - H.G. Wells
Pleasure in the job puts perfection in the work. - Aristotle


jadinolf
I love you Fred
Premium
join:2005-07-09
Ojai, CA
·DSL EXTREME

said by MarkAW See Profile :

I have downloaded and installed KB951748 and i use Zone Alarm and as you all can see i am still online with no problems.

edit: Don't get me wrong i am not saying that any of you are not having problems but i don't think this warning applys to everyone.
Hmmmmmmmmm wonder if it would help to install an older version of ZA? Oh well, I installed Comodo until this problem is resolved.
--
This post printed on 100% recycled bytes

buckw1
Premium
join:2001-08-15
Waller, TX
reply to winchester73
Commodo had to be told to allow the files also....so if someone has it set to silent, beware.


jaykaykay
4 Ever Young
Premium,MVM
join:2000-04-13
Scottsdale, AZ
·Speakeasy

reply to MarkAW
Hmmmm. I am now left to wonder if it depends upon which version, True Vector, and driver of ZA, any model, one is rinning. If it works with some and not with others, that leaves all of us up a tree till it's fixed.

winchester73

join:2003-08-08
Chapel Hill, NC
reply to winchester73
Sounds like this will be an issue for a while ...

»forum.zonelabs.org/zonelabs/boar···id=52751

hurfy
Premium
join:2002-08-06
Spokane, WA

reply to winchester73
huge multi-vendor patch day for DNS vulnerability perhaps. Every OS and vendor seems to be listed.

»securosis.com/2008/07/08/dan-kam···eleased/

Even if the instructions for a clean install work i am not repeating it and reenter the license code for 20 computers

Seems like the cure is worse than the disease ? Lowering the security setting as alternate fix doesn't sound like more secure to me ...

Sounds like something ZA should have been aware of tho :/

Think i'll pass on this one for a bit also. No screaming from the user with auto-update on yet...it installs updates when you shutdown doesn't it?


FiOS Dan
Premium
join:2001-07-06
Redondo Beach, CA
·Verizon FIOS

reply to winchester73
said by winchester73 See Profile :

Sounds like this will be an issue for a while ...

»forum.zonelabs.org/zonelabs/boar···id=52751
From that post--"Okay, the best advice is do a clean uninstall of the ZA and re-install the ZA."
To which I say "Faggedaboutit."
--
Courage is being scared to death but saddling up anyway.


Pentangle
With our thoughts we make the world.
Premium
join:2006-06-01
Vancouver BC
·Shaw

reply to winchester73
I'm running Zone Alarm Free V6.5.737.000, downloaded MS update KB951748 and lost my Internet connection. Worse had to disconnect my Linksys router 'cause even after uninstalling KB951748 the router still won't allow me to connect. Now I'm without router. When oh when will I ever learn to hold off on MS updates until the dust settles in a few days. Any suggestions on how to restore the router?
--
Life is like stepping onto a boat which is about to sail out to sea and sink. - Shunryu Suzuki-roshi


John McD

@verizon.net

reply to winchester73
Yes. Setting ZA internet security to "medium" works. So does uninstalling KB951748 and leaving the ZA internet setting on "high". But either method creates some vulnerability. Which way is less risky? I really don't know. Another workaround might be to initialize the ZA "database" and let the ZA firewall reconfigure itself from scratch. See La Luna's post for a link to the instructions. Or simply uninstall/reinstall ZA - but this is a real pain.
-
Forums » Up and Running » Security » SecuritySecurity researchers warn of new 'clickjacking' browser bugs »
« Privacy Survey Urged for Counterterror Programs  
page: 1 · 2 · 3 · 4 ...23 · 24 · 25


Saturday, 28-Nov 18:07:42 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.
page compression OFF
Most commented news this week
· [122] Time Warner Cable Fires Broadside At Broadcasters
· [112] New AT&T Ad Campaign Hits Back At Verizon
· [96] Apple Joins AT&T Verizon Snark Fest
· [87] New Bill Takes Aim At Higher Verizon ETFs
· [80] TiVo Sees Record Customer Losses
· [70] Verizon CEO: Hulu Will Be Dead Soon
· [69] In-Flight Internet Headed For Bumpy Landing?
· [64] Weekend Open Thread
· [62] Thanksgiving Open Thread
· [40] EFF Wages War On Fine Print
Most people now reading
· Using AirMax to provide triple play services? [Wireless Service Providers]
· 3.x Feral Druid - Bear Tanking Guide [World of Warcraft]
· Opera 10.10 keeps opening ICF ports - security issue? [Security]
· Windows 7 boot manager editing questions [Microsoft Help]
· how to use the 2nd line with phone hooked to the 1st line? [VOIP Tech Chat]
· ToC 4th boss - Preliminary Strategy for Twin Valkyr [World of Warcraft]
· Confused about availability... [AT&T U-verse]
· Why would I want an e reader? [General Questions]
· Gizmo5 has added a Google Voice section in its members area. [VOIP Tech Chat]
· [How to] Install Asterisk on an Asus WL-520GU router [VOIP Tech Chat]