Tech: Problem WinXP Updates (ZoneAlarm conflict)

Subject: RE: Tech: Problem WinXP Updates (ZoneAlarm conflict)
From: Stilly River Sage
Date: 26 Aug 08 - 12:12 AM

I think people concluded that the problem was with AVG. A new program was issued but it had a flaw.

The AVG folks sent out a correction, but depending on what you have on your computer, you need to either uninstall the older version and download and install the new one, or go in and update the newer AVG version with the fix that they issued that corrects the connectivity problem.

And it isn't confusing for this blonde/blond! Just something you have to work through. FWIW, I use free-AVG and my Windows updates are all up to date, and I didn't have this problem. But I think it's because I updated to the newer AVG after the patch was available.

SRS

Subject: RE: Tech: Problem WinXP Updates (Dial up conflict)
From: GUEST,Swedishkitten
Date: 25 Aug 08 - 11:23 PM

I've got I.E. 6, XP service pack 3(recently installed), AVG anti-virus,
and dial up YES DIAL UP!

Something I installed recently is causing me a few problems:

1) I can't open Hotmail in I.E.
I can open it in Mozilla FireFox, just not I.E

When I click on the email to open it
the bottom of the screen reads
javascript.

So I just updated the activeX add ons,
and installed the latest JAVA.
(JAVA has something attached to it's download
- get openoffice.org, which it wants me to install-
I didn't sign on for that, I'd like to get rid of that one.)

Didn't work. I added hotmail as a
trusted site.

As first this looked like it worked,
then it stopped working.



2) I also have a problem with something
hijacking my connection settings

I set it for Automatically detect,
and it resets itself for proxies.

I recently installed update KB951978, and service pack 3.
I think one of these is the culprit.

Oh also sometimes my back button is grayed out when it shouldn't be, but that one's a minor problem.

I read on one forum that I should reinstall windows.
You guys mentioned changing the level on Zone alarm, but I don't see any option like that on AVG.

This is all too confusing for a blonde!!!
=)

Subject: RE: Tech: Problem WinXP Updates (ZoneAlarm conflict)
From: GUEST
Date: 28 Jul 08 - 07:03 PM

Thank you for this post. I went on vacation on July 7 and came home to find my computer wouldn't access the internet even though the connection was live and working. Your adviced saved my sanity!

Subject: RE: Tech: Problem WinXP Updates (ZoneAlarm conflict)
From: Bonzo3legs
Date: 13 Jul 08 - 01:47 PM

I never download windows updates, and I never have problems other than very much reduced broadband download speeds after midday, due I think to the lying bastards at British Telecom. I got 400KB/s yesterday morning for about one hour, which then reduced to 120 max.

Subject: RE: Tech: Problem WinXP Updates (ZoneAlarm conflic
From: Jeri
Date: 13 Jul 08 - 09:21 AM

I downloaded the new Zone Alarm on another computer. (44 MB on a dial-up is ridiculous.) I installed it and installed the previously problematic update.

Everything's just peachy, and I'm back to auto-update.

Subject: RE: Tech: Problem WinXP Updates (ZoneAlarm conflic
From: GUEST,Ravenheart
Date: 13 Jul 08 - 01:59 AM

One of PC Magazine's suggested alternative courses of action was just to add your DNS servers to your trusted zone, which was always a recommendation for Zone Alarm, as I remember (I used to use it but switched to Comodo).

Anyway, I just went through the updates for a Windows 2000 machine, and things seem fine. These things always make me nervous.

Subject: RE: Tech: Problem WinXP Updates (ZoneAlarm conflict)
From: JohnInKansas
Date: 12 Jul 08 - 11:53 PM

The PC Mag article, as does the ZA bulletin posted by Barbara Shaw, indicates that Zone Alarm has released updated programs. It is implied that if you download/install the updated ZA programs the Microsoft patch can be safely installed, and you'll be able to run at recommended browser security levels.

As I suspected (see 10 Jul 08 - 01:28 PM above) PC Mag also confirms that the patch was for the DNS SYSTEM vulnerability reported very recently. The vulnerability was in the internet itself and was potentially extremely dangerous for all users worldwide regardless of operating systems or anti-everything programs individuals might have installed.

The basic - and most critical - patches are to servers, and patches appear to be required regardless of the OS used on the servers. Full details are not "out in the public" as yet, but the fix appears to involve internet traffic routing protocols that allowed SERVERS to be corrupted to misdirect connections to phony sites.

Quite obviously, if the rules of the game change, individual users may require less extensive patches to talk in the same new language the servers will use. The Microsoft WinXP patch was to permit individual machines to "keep compatible" with the new Server rules.

THE BOTTOM LINE for individual computers is that you probably want to have this patch installed, now or at least sometime fairly soon.

Zone Alarm indicates the Microsoft WinXP patch is safe if you update your ZA program(s).

You can also use the "workaround" of lowering the ZA security level until you can get around to updating, but this should be considered a "temporary fix."

The PC Mag article suggests an "option 4" that would allow you to use one of the older Zone Alarm programs at normal security levels, but requires "setting permissions" in ZA - which most people should be able to do if they can follow directions carefully, but which look a bit "teedjus" if you can use another of the methods.

John

Subject: RE: Tech: Problem WinXP Updates (ZoneAlarm conflict)
From: GUEST,DWR
Date: 12 Jul 08 - 10:44 PM

Probably nothing new or more easily understood here, but just in case . . .

PC Magazine article http://blogs.pcmag.com/securitywatch/2008/07/microsoft_dns_patch_grounds_zo.php

Subject: RE: Tech: Problem WinXP Updates (ZoneAlarm conflict)
From: Barbara Shaw
Date: 12 Jul 08 - 10:00 PM

Agreed, nutty, I had the same problem, although I was able to access the internet by doing a system restore to a previous day. I called tech support from AT&T (my ISP) and was told to disable first Zone Alarm and then McAfee, to see if one of them was causing the problem. This was apparently before it was widely known how the MS update was affecting Zone Alarm. Bingo. And then I went back to the mudcat thread which had told me that Zone Alarm was probably blocking access, etc. etc.

Anyway, it's great to have this mudcat to bounce ideas and discuss any issue under the sun, right? Sometimes I get the news headlines here before the news reaches my homepage...

Subject: RE: Tech: Problem WinXP Updates (ZoneAlarm conflic
From: nutty
Date: 12 Jul 08 - 05:46 PM

My problem, Barbara, was that without my internet connection I couldn't access Mudcat.

Although I agree, the help you get here is second to none.

Subject: RE: Tech: Problem WinXP Updates (ZoneAlarm conflict)
From: Barbara Shaw
Date: 12 Jul 08 - 04:12 PM

I got help just as quickly on mudcat (see other thread on same topic). Didn't need to disable Zone Alarm, which I greatly appreciate for it's FREE protection. I also have McAfee, and both work very well, although ZA does cause some hiccups occasionally with certain updates. But its free and worthwhile IMHO.

Subject: RE: Tech: Problem WinXP Updates (ZoneAlarm conflic
From: nutty
Date: 12 Jul 08 - 02:44 PM

I have cable broadband so contacted Virgin Media help line (free) as soon as I started having problems.

I really must commend the member of staff who dealt with me there.
He recognised the problem straight away and recommened that I disable Zone Alarm until the problem was solved - which it was within 24 hours.

Subject: RE: Tech: Problem WinXP Updates (ZoneAlarm conflict)
From: oggie
Date: 12 Jul 08 - 02:10 PM

The "bug" is not in the update, the problem is that ZoneAlarm used some non standard "clever" code that made use of the loopholes that SP3 has closed. Had ZA written standard code in the first place it wouldn't have happened.

Steve

Subject: RE: Tech: Problem WinXP Updates (ZoneAlarm conflict)
From: Mick Pearce (MCP)
Date: 12 Jul 08 - 01:20 PM

ZA has released updated to fix the problem - see the end of this thread: Tech: Microsoft system 3.0 problems.

I'd really try and find a way to avoid losing a critical update - they're there to fix security loopholes; not taking them opens you up to possible attacks.

Mick

Subject: RE: Tech: Problem WinXP Updates (ZoneAlarm conflic
From: Jeri
Date: 12 Jul 08 - 12:40 PM

I just reverted to the previous day's profile and killed automatic updates. I'd like to enable them again, but I don't want THIS one, and the updater is gonna want me to take it. Unless they kill it, I ain't gonna do automatic updates.

Subject: RE: Tech: Problem WinXP Updates (ZoneAlarm conflict)
From: artbrooks
Date: 12 Jul 08 - 10:52 AM

Thanks, JoeClone - I missed the earlier thread.

Jeri, go into "add and delete programs" and remove update KB951748...it's probably all the way at the end of the update list. That got Jenn up and running again at home. I'm traveling with the Vista laptop, so I wasn't affected.

Subject: RE: Tech: Problem WinXP Updates
From: Jeri
Date: 12 Jul 08 - 10:02 AM

I hope they have plans to fix the bug in the update.

My Zone Alarm security level IS set to 'medium' and I still couldn't connect.

Subject: Tech: ZoneAlarm-Internet Access Issue
From: artbrooks
Date: 12 Jul 08 - 09:56 AM

A recent Windows update has apparently messed up web access for people who (1) have Windows ME or XP and (2) use one of the Zone Alarm firewall/virus protection products. ZA says, Microsoft Update KB951748 is known to cause loss of internet access for ZoneAlarm users on Windows XP/2000. Windows Vista users are not affected. The fix is basically to go in to 'add and delete programs" and remove that update.

Subject: RE: Tech: Problem WinXP Updates
From: Barbara Shaw
Date: 11 Jul 08 - 07:21 PM

Just got this from Zone Alarm:

Workaround to Sudden Loss of Internet Access Problem

Date Published : 8 July 2008

Date Last Revised : 9 July 2008

Overview : Microsoft Update KB951748 is known to cause loss of internet access for ZoneAlarm users on Windows XP/2000. Windows Vista users are not affected.

Impact : Sudden loss of internet access

Platforms Affected : ZoneAlarm Free, ZoneAlarm Pro, ZoneAlarm AntiVirus, ZoneAlarm Anti-Spyware, and ZoneAlarm Security Suite

Recommended Actions -

Download and install the latest versions which solve the loss of internet access problem here (English only):

ZoneAlarm Internet Security Suite
ZoneAlarm Pro
ZoneAlarm Antivirus
ZoneAlarm Anti-Spyware
ZoneAlarm Basic Firewall
- or follow the directions below.

Option 1: Move Internet Zone slider to Medium

Navigate to the "ZoneAlarm Firewall" panel
Click on the "Firewall" tab
Move the "Internet Zone" slider to medium
Option 2: Uninstall the hotfix

Click the "Start Menu"
Click "Control Panel", or click "Settings" then "Control Panel"
Click on "Add or Remove Programs"
On the top of the add/remove programs dialog box, you should see a checkbox that says "show updates". Select this checkbox
Scroll down until you see "Security update for Windows (KB951748)"
Click "Remove" to uninstall the hotfix

Subject: RE: Tech: Problem WinXP Updates
From: Barbara Shaw
Date: 11 Jul 08 - 04:38 PM

This is the exact same problem I asked about in another thread:
thread.cfm?threadid=112608&messages=14

The problem for me was indeed Zone Alarm, but you don't need to disable it. Just change the Internet Zone Security (within ZA on the Firewall tab) to MED instead of HIGH (where the update apparently moves it) and you should have internet access again.

Subject: RE: Tech: Problem WinXP Updates
From: Folkiedave
Date: 11 Jul 08 - 04:36 PM

My problem was the the Apple Notebook would connect via the Wi-Fi - but hte computer to which the WiFi was connected wouldn't.

Eventually I rang my ISP..................Microsloth is probably best wut it is not a word I used atthe time. Most of them began with "f"........

Subject: RE: Tech: Problem WinXP Updates
From: Geoff the Duck
Date: 11 Jul 08 - 03:55 PM

Thanks for the heads up on this problem.
We had spent the last couple of days trying to figure out why the old Win ME computer would connect to the internet but the newer Win Xp two wouldn't.
Have uninstalled the Microslob patch and are back in communication.
Quack!
GtD.

Subject: RE: Tech: Problem WinXP Updates
From: LesB
Date: 10 Jul 08 - 05:52 PM

I had this problem & i've had to disable zone alarm & rely on xp firewall.
Cheers
Les

Subject: RE: Tech: Problem WinXP Updates
From: Newport Boy
Date: 10 Jul 08 - 04:29 PM

I've now downloaded and installed the update to Zone Alarm Pro, and then the WinXP Updates, and all works OK.

Except that WinXP Security Center now doesn't think Zone Alarm is running, but I can cope with that.

Phil

Subject: RE: Tech: Problem WinXP Updates
From: JohnInKansas
Date: 10 Jul 08 - 01:28 PM

The release note for patch KB951748 can be viewed at:

MS08-037: Description of the security update for DNS in Windows Server 2003, in Windows XP, and in Windows 2000 Server (client side): July 8, 2008 (KB951748)

This link is essentially just a notice that the update has been releassd, and lists the files contained in the patch download. It includes links to where Microsoft claims to provide free support for anyone having problems with the patch.

Since this patch does affect DNS, it's the most likely to have caused problems with your internet hookup.

KB article 951978 can be found at Script output is not displayed as expected when you run VBScript or JScript scripts in Windows Vista Service Pack 1, in Windows Server 2008, or in Windows XP Service Pack 3. Note that this KB article describes the problem that is supposed to be fixed by the patch, but does not describe the actual patch.

There is no obvious reason why the KB951978 patch should affect broadband connection, but anything is possible.

The KB951748 patch quite probably relates to a recently (two weeks ago) reported MAJOR PROBLEM with DNS servers that could allow "address spoofing" on large numbers of internet servers to redirect users to fake servers where malware exposure would be the intended result.

News articles have praised the "rapid response of worldwide service providers" in "fixing" this problem to prevent the "total destruction of the internet." "Rapid response" is frequently the euphemism applied to "released with less than normal testing."

The published stories state that "no exploits using the vulnerability have occurred," but the site responsible for registering and issuing Domain Names was reported as having been "hacked," quite possibly using this vulnerability, less than a week ago. The result was that people attempting to connect to the Name Service site were redirected to a phony site. The affected service asserts that no malware was found at the phony sites, and that the problem was corrected "in less than 20 minutes," but affirms that it did happen. It would appear to have been a "demonstration of concept" attack.

Microsoft does not confirm that this is the purpose of the patch; but IF THIS IS THE VULNERABILITY that the KB951748 patch is intended to fix, then it IS A BIG DEAL; but the main effort applies to Servers. The patch may be required for individual user machines to adapt to the server changes as more servers are updated.

Also note that this vulnerability is not just for Windows, but affects ALL servers using DNS regardless of operating systems used. The vulnerability appears to be in the port access permissions that are part of the DNS specification, although details won't be released until "the web" thinks the problem has been fixed.

OTHER ISSUE:

It may also be noted that a Press Release – undated but circulated within the past week – announced (again) that (one more time) Microsoft will begin (once more) to download WinXP SP3 via Automatic Updates. The announced start (this time) for the Automatic Download and Installation of SP3 was to begin TODAY (10 July 2008) starting with users in Australia.

SP3 has been available for download at the Microsoft update sites, but has been optional. If it's been moved to "Automatic" it may be assumed that it will be automatically installed for anyone receiving auto updates.

No estimate was given in the PR for how long it will take to download to all users, but Automatic Updates claim to serve all users in the US at least once per week.

John

Subject: RE: Tech: Problem WinXP Updates
From: MoorleyMan
Date: 10 Jul 08 - 01:21 PM

That's useful info Mick.
I moved from Norton and ZoneAlarm onto BitDefender last year and so far, touch wood, no ill effects from the latest XP (SP3 and the aforementioned two) Updates.

Googling ZoneAlarm, I see, now brings up the following advice: "Check Point has promised to provide a fix later today to restore internet connectivity to ZoneAlarm customers who have suffered a web blackout after ..." and quotes VNUNet.com as a source.

Subject: RE: Tech: Problem WinXP Updates
From: Newport Boy
Date: 10 Jul 08 - 12:46 PM

Thanks, Mick - I use Zone Alarm & will follow their advice.

Phil

Subject: RE: Tech: Problem WinXP Updates
From: John on the Sunset Coast
Date: 10 Jul 08 - 11:31 AM

I checked my updates and find that KB951748 installed sometime this morning, and no ill effects.   -978 has not yet installed. Thanks for the warnings.

Subject: RE: Tech: Problem WinXP Updates
From: GUEST,Ray
Date: 10 Jul 08 - 11:17 AM

The same thing is being reported on a genealogy board I subscribe to. Don't understand a word of it - I think I'll stick with my Macs. but have a look http://archiver.rootsweb.ancestry.com/th/read/CHESHIRE/2008-07/1215633348
Ray

Subject: RE: Tech: Problem WinXP Updates
From: Stilly River Sage
Date: 10 Jul 08 - 10:53 AM

I downloaded and installed those updates. Knock wood, so far no problems. I use Kerio firewall and AVG antivirus.

SRS

Subject: RE: Tech: Problem WinXP Updates
From: Mick Pearce (MCP)
Date: 10 Jul 08 - 10:50 AM

This is probably the widely reported incompatibility with Zone Alarm. KB..748 fixed a security error in DNS handling but has a problem with ZA. Setting ZA from high to medium should restore internet access, but ZA is recommending unistalling the XP patch until it's been sorted out.

Mick

Subject: RE: Tech: Problem WinXP Updates
From: Jeri
Date: 10 Jul 08 - 09:38 AM

The same thing happened with me with yesterday's updates and had to restore back to the previous day. I also tried it again with the same results and solution.

I've disabled automatic updates and will have to do it manually, if I do it.

Subject: Tech: Problem WinXP Updates
From: Newport Boy
Date: 10 Jul 08 - 09:34 AM

Yesterday I downloaded and installed 2 WinXP updates:

Security Update for Windows XP (KB951748) and
Update for Windows XP (KB951978)

As a result, my computer lost the broadband connection. I could find no way of restoring it. The modem/router tested normal, and the other computer on the network connected OK.

I turned back the system partition to the state prior to the updates (using Acronis True Image)and all was well again.

I repeated the installation today with the same result. Since I was going one step at a time, I tried removing the two updates using Add/Remove Programs, and all was OK again. Removing one of the updates looked problematic, as one was dependent on the other.

Install them with caution!

Phil