Security Update for Windows XP (KB951748) and Zone Alarm

[NICK ADSL UK]

Please note that i am getting reports of zone alarm users who install this update and then not be able to connect to the INTERNET
It would be best to refrain from installing this update at this time until it can be clarified as safe to do so
This applies to this Microsoft update only
http://www.microsoft.com/downloads/details.aspx?familyid=a2b016fa-b108-4e8e-b41b-4ca89002907b&displaylang=en

[Oldjim]

Also seems to affect the 32 bit version as well

[NICK ADSL UK]

Yes thank you Jim :)

[Page42]

I can confirm the connection problem after installing the MS Critical Updates, and I run ZoneAlarmPro. Fortunately for me I created an Acronis back up image prior to installing. I usually don't do that, but this time I did, and it saved me some trouble. I suppose I could have gone the uninstall route, but I prefer restoring a good working image to uninstalling MS updates.

[Fajo]

-{ Quote: "Please note that i am getting reports of zone alarm users who install this update and then not be able to connect to the INTERNET
It would be best to refrain from installing this update at this time until it can be clarified as safe to do so
This applies to this Microsoft update only
http://www.microsoft.com/downloads/details.aspx?familyid=a2b016fa-b108-4e8e-b41b-4ca89002907b&displaylang=en" }-

Ill make a Image tonight of my HD and try it against the new ZA beta see if its affected.

[SoCalReviews]

I experienced this exact same problem today after the recent security update KB951748 and Malicious software removal tool which is update KB890830. My main system was running extremely sluggish and I had no internet connection at all. I had to do a complete system restore using the previous day's auto restore point before my system returned to normal. I am using Windows XP Pro SP2, 32bit, along with a number of other security programs including ZASS 7.0.462.000.

Update: The ZA support forum posts confirm that this recent MS security update KB951748 is the source of this problem. A program patch for ZA is supposedly on the way. For the time being they have two temporary work-arounds posted (one work-around is to simply remove of the MS security update KB951748 hotfix.) The problem is that if Windows automatic updates are set to install automatically then the fix could possibly install automatically on the next computer shutdown. To avoid this from happening I have temporarily turned off automatic update installation in the Windows settings but asked Windows to prompt me before installing the updates. It would be recommended for ZA users who are experiencing this problem to take a look at the ZA support forum for specific information regarding this issue.

[WindBlade]

So far, is Zonealarm the ONLY firewall that is being affected? Other firewalls all work fine?

[henryg]

Looks like ZoneLabs have updated all their versions (Windows XP/2000) to correct the problem:

http://download.zonealarm.com/bin/free/pressReleases/2008/LossOfInternetAccessIssue.html

[chrispbug]

I had the same problems. Downloaded the ZA update and all's back to normal. I've also switch auto updates back on but asking me what to download just in case the Windows file update rears its ugly head again

[Rosie]

Hello

I have just downloaded the Zone Alarm update for the problem with KB951748

Do I need to uninstall my previous version of Zone Alarm free version. 6.5 737.000 or can I install on top of it.

Many thanks

Rosie

[AKAJohnDoe]

It did not affect ZoneAlarm on Vista at all :)

[Page42]

v7.0.483.000 for ZAP worked as advertised. MS Critical Updates now re-installed and internet connection is fine.

[Page42]

-{ Quote: "I have just downloaded the Zone Alarm update for the problem with KB951748

Do I need to uninstall my previous version of Zone Alarm free version. 6.5 737.000 or can I install on top of it." }-
Hi Rosie

I went over top with 7.0.483.000 in ZoneAlarmPro. Everything went smooth on both machines. But I see you are still running the 6.5 branch (older version), and it may be advisable to do a clean install because you are skipping over about 7 version upgrades (however minor they may be).

Of course it is up to you. I would try over the top first, but I would also have a disk image handy to restore if things get funky. I'd say you can't go wrong with the clean install, but I'd personally offer the same qualifier... have a restore plan on hand.

Here's the Release History (http://download.zonealarm.com/bin/free/information/znalm/zaReleaseHistory.html).

Good luck.

[Rosie]

Hello Page42

I did an over the top install and it worked with no problems.

Thank you for your reply

Rosie

[Page42]

That's good news. Have you got the MS Updates installed too?

[NICK ADSL UK]

********************************************************************
Title: Microsoft Security Bulletin Major Revisions
Issued: July 10, 2008
********************************************************************

Summary
=======
The following bulletins have undergone a major revision increment.
Please see the appropriate bulletin for more details.

* MS08-037 - Important

Bulletin Information:
=====================

* MS08-037 - Important

- http://www.microsoft.com/technet/security/bulletin/ms08-037.mspx
- Reason for Revision: V2.0 (July 10, 2008 Bulletin revised to
inform users of ZoneAlarm and Check Point Endpoint Security
of an Internet connectivity issue detailed in the section,
Frequently Asked Questions (FAQ) Related to this Security
Update. The revision did not change the security update files
in this bulletin, but users of ZoneAlarm and Check Point
Endpoint Security should read the FAQ entries for guidance.
- Originally posted: July 8, 2008
- Updated: July 10, 2008
- Bulletin Severity Rating: Important
- Version: 2.0

[Rosie]

Hello Page42

Yes, All Microsoft updates installed fine

Thanks

Rosie

[Eagle Creek]

http://www.nucia.nl/forum/showpost.php?p=360251&postcount=6 (Dutch)

ZoneAlarm has released a new version of their FireWall to solve the problems the recent Microsoft patch caused. Although the Microsoft patch has been released to fix a certain DNS-vulnerability, it also caused ZoneAlarm to behave erratically and blocking all Internet traffic.

Version 7.0.483.000 solves this problem and can be downloaded from the ZA website, which can be found here (http://download.zonealarm.com/bin/free/pressReleases/2008/LossOfInternetAccessIssue.html).

[dmenace]

Does this security update mean that -

ALL previous versions of Zone Alarm (4.x, 5.x, 6.x)

No longer work ???

And only the latest patched version of ZA works these days ??? :thumbd:

[HAN]

-{ Quote: "Does this security update mean that -

ALL previous versions of Zone Alarm (4.x, 5.x, 6.x)

No longer work ???

And only the latest patched version of ZA works these days ??? :thumbd:" }-

No. I run free ZoneAlarm 6.1.744.001 on 2 PCs and it had no issues at all from the MS update. I have no definitive info but it appears that from ZoneAlarm version 6.5.x and higher is where the problems occurred.

[ccsito]

-{ Quote: "No. I run free ZoneAlarm 6.1.744.001 on 2 PCs and it had no issues at all from the MS update. I have no definitive info but it appears that from ZoneAlarm version 6.5.x and higher is where the problems occurred." }-
Starting with version 6.5, Zone Alarm would not install on PCs with older OS systems than Windows 2000. So there must have been a major internal change to the firewall.

[dmenace]

-{ Quote: "Starting with version 6.5, Zone Alarm would not install on PCs with older OS systems than Windows 2000. So there must have been a major internal change to the firewall." }-

I see, thanks

[ftwynne59]

Hi

Please can you advise....I suffered from the failed internet connection following the XP update.As a workaround, and until I install the latest Zonealarm free version, I have the Internet Security Zone set to 'Medium'.

What are the real risks associated wth this setting ? I have the following security apps : Comodo Boclean, KAV7 and Prevx2 realtime (plus SpywareBlaster and on demand scanners A2 Free & Superantispyware).
I do not want to expose my PC to any real danger !

Many thanks

Terry

[Page42]

-{ Quote: "Please can you advise....I suffered from the failed internet connection following the XP update.As a workaround, and until I install the latest Zonealarm free version, I have the Internet Security Zone set to 'Medium'.

What are the real risks associated wth this setting ? I have the following security apps : Comodo Boclean, KAV7 and Prevx2 realtime (plus SpywareBlaster and on demand scanners A2 Free & Superantispyware).
I do not want to expose my PC to any real danger !" }-
I urge you to install the ZoneAlarm upgrade. It's been available for more than a week now, so why concern yourself with workarounds when a legitimate fix is easily applied?

As for lowering the ZA setting to medium, I'd say it seems like the cure is worse than the disease. And it's not just my opinion. Here's what a Zonelabs Forum Mod (http://forum.zonelabs.org/zonelabs/board/message?board.id=cfg&message.id=52860) has to say (my bolding added)...

-{ Quote: "We have been working with MS over night on the issue. We are very confident a fix will be released soon. As far as how that is distributed either a patch from MS or in the form of a new build from ZA has not been determined.

We will notify all users of a fix when its ready at the top of the forum in the main announcements section.

We also still stand by our current workaround that you should uninstall the MS update KB951748

And do not set your ZA internet security level to Medium. By setting to Medium you potential expose your computers to a huge number of other threats than just the one that this patch from MS fixes.

Forum Moderator" }-

I realize that the ZoneAlarm site lists the medium setting as a workaround option, and I'm sure lots of people took that course, but my instincts tell me the Forum Mod quoted above is giving better advice. I chose the 2nd option, which was to uninstall the MS hotfix. ZA was out with v7.0.483.000 a day or two later.

Install the ZA upgrade and forget about it! ;)

[ftwynne59]

-{ Quote: "I urge you to install the ZoneAlarm upgrade. It's been available for more than a week now, so why concern yourself with workarounds when a legitimate fix is easily applied?

As for lowering the ZA setting to medium, I'd say it seems like the cure is worse than the disease. And it's not just my opinion. Here's what a Zonelabs Forum Mod (http://forum.zonelabs.org/zonelabs/board/message?board.id=cfg&message.id=52860) has to say (my bolding added)...



I realize that the ZoneAlarm site lists the medium setting as a workaround option, and I'm sure lots of people took that course, but my instincts tell me the Forum Mod quoted above is giving better advice. I chose the 2nd option, which was to uninstall the MS hotfix. ZA was out with v7.0.483.000 a day or two later.

Install the ZA upgrade and forget about it! ;)" }-

Thanks Page42...will uninstall old version of ZA and install new version. !!

[Page42]

I installed right over the top without any trouble. I also had a disk image handy in case things got ugly. Good luck.

[ftwynne59]

-{ Quote: "I installed right over the top without any trouble. I also had a disk image handy in case things got ugly. Good luck." }-

Hi all (esp Page42)...Trouble !!....tried to install new version over old version....installer stops at 22% complete (at the zl.quarantine.dll point). Hangs for ages...not responding. Tried again,same result. Uninstalled old version, rebooted, tried again, same result, stops at 22% complete.

Anyone ??

Cheers
Terry

[henryg]

Terry, you'll have to Manually uninstall ZoneAlarm before installing the new version. This link might help:

http://www2.nohold.net/noHoldCust542/Prod_1/Articles55646/CompleteUninstallNonNT.html

[Page42]

-{ Quote: "Hi all (esp Page42)...Trouble !!....tried to install new version over old version....installer stops at 22% complete (at the zl.quarantine.dll point). Hangs for ages...not responding. Tried again,same result. Uninstalled old version, rebooted, tried again, same result, stops at 22% complete." }-
When I said I installed the new version over top of the old, I hope you knew I meant via the internal program updater that uninstalled the existing version for me. If I misled you (and I am afraid I might have) by not noting that, I apologize!! Hope you get it ironed out. :(