Notice: Today's Windows Update KB951748 Breaks ZoneAlarm Internet Access

**OldGrayGary** · 07-09-2008, 02:46 PM

For the many TSF members & visitors who use ZoneAlarm or ZoneAlarmPro as their firewall, please note -

Microsoft Windows Update KB951748, which addresses a vulnerability concerning dns 'poisoning', causes ZoneAlarm to deny Internet access for those users who have their Internet Zone Security set to "High" (which is the default for the Internet Zone).

Workarounds:
1) Temporarily disable ZoneAlarm, but ensure that the Windows Firewall is enabled & running.
2) Temporarily set the Internet Zone Security to "Medium" (in ZoneAlarm).
3) Uninstall Windows Update KB951748 (if you don't see it in Add/Remove Programs, place a checkmark in the box "show updates"). You can have Windows Update "hide" that update until after a patch from ZoneAlarm has been released.
4) Uninstall ZoneAlarm, but enable the Windows Firewall - or install another well-rated firewall -- at least until ZoneAlarm offers a patch.

ZoneAlarm is aware of the issue, and is working on a fix: http://forums.zonealarm.org/zonelabs...ssage.id=18667

ZoneAlarm's suggestion is to uninstall the Windows Update until ZA has had time to release a patch.

Best of luck
. . . Gary

cbwilsha · 07-09-2008, 05:46 PM

I did #1 and 2 above and still can't connect. Reluctant to uninstall the update and would like to "hide" it as you mention in #3 above. How do I hide it for later use? Thanks.

C.B.

P.S. I'm using a different computer to get online now.

**Coolfreak** · 07-09-2008, 05:48 PM

Thanks Gary, I will keep note of this.

-Coolfreak

cbwilsha · 07-09-2008, 06:40 PM

Gary--I went ahead and uninstalled the update and I still can't get on the internet! I also set Zone Alarm security to Medium and disabled Zone Alarm.

BTW, now I get a new Microsoft Update note in my toolbar and it now detects that I removed KB951748.

Any ideas about what else may have been affected by the stinking update?

Thanks very much,

C.B.

**OldGrayGary** · 07-10-2008, 04:03 AM

Hi C.B.

Sorry to hear you're having trouble.

If you have uninstalled update KB951748, you should be able to run ZoneAlarm on your regular settings. Try putting things back to normal in ZA & see if that helps. Turn the Windows Firewall back off, too -- since you'll have re-enabled ZA. Check in Add/Remove, too, to make sure that KB951748 is still truly uninstalled (if it shows in the list, it's still installed).

To 'hide' update KB951748, visit Windows Update (or Microsoft Update) manually, and click on the "Custom" button. When KB951748 appears in the list of available updates, remove the checkmark from the box in front of it, and place a checkmark in the box "Do not show this update again".

When ZA releases a patch so that it can get along with KB951748, you can select "show hidden updates" from the options listed in the option list on the left-hand side of your Windows Update (or Microsoft Update) home screen. You can then download and install the update.

Perhaps you had both ZA and the Windows Firewall running at the same time, & that caused as much trouble as KB951748.

Never a dull moment!
. . . Gary

**ThorXP** · 07-10-2008, 04:22 AM

Hi Gary, This is written really good and I thank you for the post this is excellent.

cbwilsha · 07-10-2008, 10:24 AM

Gary--The only way I got mine working again was to use System Restore back to Monday, July 7. All is okay now and I've since downloaded an update to ZoneAlarm and "hidden" the bad KB951748 so it will not be installed. Hopefully Microsoft will do something about it.

Thanks very much for your help.

C.B.

**justpassingby** · 07-10-2008, 07:41 PM

ZoneAlarm released an update :

Workaround to Sudden Loss of Internet Access Problem

07-09-2008, 02:46 PM	#1 (permalink)
OldGrayGary Mentor, Microsoft Support Join Date: Jun 2006 Location: Woodland Hills, CA Posts: 2,233 OS: Windows 98se/2000/XP/Vista	Notice: Today's Windows Update KB951748 Breaks ZoneAlarm Internet Access For the many TSF members & visitors who use ZoneAlarm or ZoneAlarmPro as their firewall, please note - Microsoft Windows Update KB951748, which addresses a vulnerability concerning dns 'poisoning', causes ZoneAlarm to deny Internet access for those users who have their Internet Zone Security set to "High" (which is the default for the Internet Zone). Workarounds: 1) Temporarily disable ZoneAlarm, but ensure that the Windows Firewall is enabled & running. 2) Temporarily set the Internet Zone Security to "Medium" (in ZoneAlarm). 3) Uninstall Windows Update KB951748 (if you don't see it in Add/Remove Programs, place a checkmark in the box "show updates"). You can have Windows Update "hide" that update until after a patch from ZoneAlarm has been released. 4) Uninstall ZoneAlarm, but enable the Windows Firewall - or install another well-rated firewall -- at least until ZoneAlarm offers a patch. ZoneAlarm is aware of the issue, and is working on a fix: http://forums.zonealarm.org/zonelabs...ssage.id=18667 ZoneAlarm's suggestion is to uninstall the Windows Update until ZA has had time to release a patch. Best of luck . . . Gary __________________

07-09-2008, 05:46 PM	#2 (permalink)
cbwilsha Registered User Join Date: Feb 2005 Location: Southeast Texas Posts: 56 OS: Vista, XP	Re: Notice: Today's Windows Update KB951748 Breaks ZoneAlarm Internet Access I did #1 and 2 above and still can't connect. Reluctant to uninstall the update and would like to "hide" it as you mention in #3 above. How do I hide it for later use? Thanks. C.B. P.S. I'm using a different computer to get online now. Last edited by cbwilsha; 07-09-2008 at 05:48 PM.

07-09-2008, 05:48 PM	#3 (permalink)
Coolfreak Mentor, Microsoft Support Join Date: May 2008 Location: Wilkes-Barre, PA Posts: 3,127 OS: Windows XP Pro / Windows Vista / Windows 7	Re: Notice: Today's Windows Update KB951748 Breaks ZoneAlarm Internet Access Thanks Gary, I will keep note of this. -Coolfreak __________________ I subscribe to all threads I post in. But, if in case I don't or I forget, and I don't post back within 24 hours, please PM me. I will get back to your thread ASAP. #2 Texas Longhorns 8-0 Everest ~ DBAN ~ UBCD4WIN ~ ImgBurn ~ Memtest86+ ~ HDD Diags

07-09-2008, 06:40 PM	#4 (permalink)
cbwilsha Registered User Join Date: Feb 2005 Location: Southeast Texas Posts: 56 OS: Vista, XP	Re: Notice: Today's Windows Update KB951748 Breaks ZoneAlarm Internet Access Gary--I went ahead and uninstalled the update and I still can't get on the internet! I also set Zone Alarm security to Medium and disabled Zone Alarm. BTW, now I get a new Microsoft Update note in my toolbar and it now detects that I removed KB951748. Any ideas about what else may have been affected by the stinking update? Thanks very much, C.B.

07-10-2008, 04:03 AM	#5 (permalink)
OldGrayGary Mentor, Microsoft Support Join Date: Jun 2006 Location: Woodland Hills, CA Posts: 2,233 OS: Windows 98se/2000/XP/Vista	Re: Notice: Today's Windows Update KB951748 Breaks ZoneAlarm Internet Access Hi C.B. Sorry to hear you're having trouble. If you have uninstalled update KB951748, you should be able to run ZoneAlarm on your regular settings. Try putting things back to normal in ZA & see if that helps. Turn the Windows Firewall back off, too -- since you'll have re-enabled ZA. Check in Add/Remove, too, to make sure that KB951748 is still truly uninstalled (if it shows in the list, it's still installed). To 'hide' update KB951748, visit Windows Update (or Microsoft Update) manually, and click on the "Custom" button. When KB951748 appears in the list of available updates, remove the checkmark from the box in front of it, and place a checkmark in the box "Do not show this update again". When ZA releases a patch so that it can get along with KB951748, you can select "show hidden updates" from the options listed in the option list on the left-hand side of your Windows Update (or Microsoft Update) home screen. You can then download and install the update. Perhaps you had both ZA and the Windows Firewall running at the same time, & that caused as much trouble as KB951748. Never a dull moment! . . . Gary __________________

07-10-2008, 04:22 AM	#6 (permalink)
ThorXP TSF Enthusiast Join Date: Mar 2008 Posts: 2,568 OS: Windows XP Pro SP3, Kubuntu & Ubuntu 8.10	Re: Notice: Today's Windows Update KB951748 Breaks ZoneAlarm Internet Access Hi Gary, This is written really good and I thank you for the post this is excellent. __________________ I was always taught to respect my elders, but it keeps getting harder to find one. *Heaven goes by favorites, If it didn't then your dog would get in first. Amen.*

07-10-2008, 10:24 AM	#7 (permalink)
cbwilsha Registered User Join Date: Feb 2005 Location: Southeast Texas Posts: 56 OS: Vista, XP	Re: Notice: Today's Windows Update KB951748 Breaks ZoneAlarm Internet Access Gary--The only way I got mine working again was to use System Restore back to Monday, July 7. All is okay now and I've since downloaded an update to ZoneAlarm and "hidden" the bad KB951748 so it will not be installed. Hopefully Microsoft will do something about it. Thanks very much for your help. C.B.

07-10-2008, 07:41 PM	#8 (permalink)
justpassingby Moderator, Microsoft Support Join Date: Mar 2007 Location: Belgium Posts: 6,219 OS: XP Home SP3 / Ubuntu My System	Re: Notice: Today's Windows Update KB951748 Breaks ZoneAlarm Internet Access ZoneAlarm released an update : Workaround to Sudden Loss of Internet Access Problem __________________ Malware removal steps. Post your logs there and not here ! Posting system specs Last edited by justpassingby; 07-10-2008 at 07:44 PM.