KB951748 no longer offered after installing XP SP3

I had been holding off on installing KB951748 because of issues with the
version of Zone Alarm I am using. I just installed SP3 for Windows XP
Pro, and I now notice that KB951748 is no longer offered by Windows Update.

The five files in question, which go to v5.1.2600.5625 when KB951748 is
installed, are at v5.1.2600.5512.

I'm not complaining, but I AM curious as to why this is happening.

John
--
Please reply in this newsgroup. I never post my true
email address to prevent spam. Thank you.

Did you reinstall WinXP before you installed SP3?

Was KB956803 (MS08-066) offered and installed?

What ZA application is installed and what version is it (e.g.,
v7.0.482.000)?

[CC: Ebitz]
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

John wrote:
> I had been holding off on installing KB951748 because of issues with the
> version of Zone Alarm I am using. I just installed SP3 for Windows XP
> Pro, and I now notice that KB951748 is no longer offered by Windows
> Update.
>
> The five files in question, which go to v5.1.2600.5625 when KB951748 is
> installed, are at v5.1.2600.5512.
>
> I'm not complaining, but I AM curious as to why this is happening.
>
> John

PA Bear [MS MVP] wrote:
> Did you reinstall WinXP before you installed SP3?

No. It was at SP2 patched through July 2008 except for KB951748.

> Was KB956803 (MS08-066) offered and installed?

No. And I see that is another one I won't be installing if offered
because it also breaks ZA.

> What ZA application is installed and what version is it (e.g.,
> v7.0.482.000)?

It is the free version of Zone Alarm v6.5.737.000.
Please don't ask me to update ZA to v7.0.483.000. I tried that a few
weeks ago and that caused conflicts with my McAfee VirusScan v5.03.
BTW, I have a real problem with OS updates which break working applications.

> [CC: Ebitz]

John
--
Please reply in this newsgroup. I never post my true
email address to prevent spam. Thank you.

The fact that you're not running ZA v7.0.483.0000 (or higher) is most
assuredly related to fact that your machine has not been offered KB951478 or
KB956083 (e.g., both updates /might/ be blocked by the update servers due to
the outdated ZA version)...and remains vulnerable to the many exploits
addressed by each critical security update!

It simply does not make sense to be running an unpatched machine simply
because VirusScan v5.x and ZA v6.x don't play nicely with each other. Some
suggestions:

1. Upgrade to ZA v7.0.483.0000 or higher. (Yes, I know what you said but
even ZA has been advising this since mid-July 2008)

2. Uninstall ZA v6.5.737.000 and enable the Windows Firewall. If you
connect via a router, that should be sufficient protection for most home
users.

3. Uninstall ZA v6.5.737.000 and replace it with the most recent version of,
e.g., Comodo or Online Armor firewall (both free).

4a. Uninstall Virus Scan.

4b. Download/run this removal tool & reboot:
http://service.mcafee.com/FAQDocumen...107083&lc=1033

4c. Install your another anti-virus application of your choice. If cost is
a factor, I can recommend Avira AntiVir or Avast4 (both free).

5. Open a free support incident (to be told any/all of the above again):

Start a free Windows Update support incident request:
https://support.microsoft.com/oas/de...spx?gprid=6527

For home users, no-charge support is available by calling 1-866-PCSAFETY in
the United States and in Canada or by contacting your local Microsoft
subsidiary. There is no-charge for support calls that are associated with
security updates. When you call, clearly state that your problem is related
to a Security Update and cite the update's KB number (e.g., KB951748;
KB956803).

For more information about how to contact your local Microsoft subsidiary
for security update support issues, visit the International Support Web
site: http://support.microsoft.com/common/international.aspx

For enterprise customers, support for security updates is available through
your usual support contacts.
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE, OE, Security, Shell/User)
AumHa VSOP & Admin; DTS-L.net

John wrote:
> PA Bear [MS MVP] wrote:
>> Did you reinstall WinXP before you installed SP3?
>
> No. It was at SP2 patched through July 2008 except for KB951748.
>
>> Was KB956803 (MS08-066) offered and installed?
>
> No. And I see that is another one I won't be installing if offered
> because it also breaks ZA.
>
>> What ZA application is installed and what version is it (e.g.,
>> v7.0.482.000)?
>
> It is the free version of Zone Alarm v6.5.737.000.
> Please don't ask me to update ZA to v7.0.483.000. I tried that a few
> weeks ago and that caused conflicts with my McAfee VirusScan v5.03.
> BTW, I have a real problem with OS updates which break working
> applications.
>
<paste>
> John wrote:
>> I had been holding off on installing KB951748 because of issues with the
>> version of Zone Alarm I am using. I just installed SP3 for Windows XP
>> Pro, and I now notice that KB951748 is no longer offered by Windows
>> Update.
>>
>> The five files in question, which go to v5.1.2600.5625 when KB951748 is
>> installed, are at v5.1.2600.5512.
>>
>> I'm not complaining, but I AM curious as to why this is happening.

PA Bear [MS MVP] wrote:
>
> It simply does not make sense to be running an unpatched machine simply
> because VirusScan v5.x and ZA v6.x don't play nicely with each other.
> Some suggestions:
>
> 3. Uninstall ZA v6.5.737.000 and replace it with the most recent version
> of, e.g., Comodo or Online Armor firewall (both free).

I'm looking at the web sites for these programs. I see that Comodo
includes both a Firewall and an Anti-Virus program in their free
Internet Security Suite. Would this combination alone be a good choice?

BTW, my LinkSys BEFSX41 router includes a hardware firewall, so I have
both hardware and software firewalls running. I had the software
firewall first, but saw no reason to remove it when I added the router
for my home network.

> 4c. Install your another anti-virus application of your choice. If cost
> is a factor, I can recommend Avira AntiVir or Avast4 (both free).

Is there a web site somewhere which objectively compares and rates these
different programs? Are these two programs any better than the
Anti-Virus program that is part of the Comodo Internet Security Suite?
Thanks!

John
--
Please reply in this newsgroup. I never post my true
email address to prevent spam. Thank you.

"John" <> schrieb:

> I had been holding off on installing KB951748 because of issues with the
> version of Zone Alarm I am using. I just installed SP3 for Windows XP
> Pro, and I now notice that KB951748 is no longer offered by Windows Update.

This is due to a fatal error of the Windows Update detection mechanism.
KB951748 (MS08-037) isn't offered to Windows XP SP3 systems *although*
Windows XP SP3 is still affected by the security hole which is aimed to
be closed by KB951748.

Looking at Windows Update Catalog for KB951748, you'll find the *false*
information in the Paket Details, that KB951748 has been superseded by
Windows XP SP3 which is obviously wrong:
http://catalog.update.microsoft.com/...d-4acb2b41210e
(open the link in Internet Explorer and have a look into the "Paket Details")

I can only force to download and install KB951748 (MS08-037) manually
via DownloadCenter as long as MS doesn't get the error fixed:
http://www.microsoft.com/downloads/d...8-b38907467cdf

Bye,
Freu"Sorry for beeing late on this"di

I second Freudi's observation on the non-offering of KB951748 after the
application of XP SP3 if it was not installed prior to applying SP3.
It must be manually downloaded and installed as automatic updating does
NOT detect that it is needed.
This appears to be a detection issue and has been brought to MS'
attention ... we're still waiting for an explanation as to why this is
occurring.

MowGreen [MVP 2003-2009]
===============
*-343-* FDNY
Never Forgottten
================


Ottmar Freudenberger wrote:

> "John" <> schrieb:
>
>
>>I had been holding off on installing KB951748 because of issues with the
>>version of Zone Alarm I am using. I just installed SP3 for Windows XP
>>Pro, and I now notice that KB951748 is no longer offered by Windows Update.
>
>
> This is due to a fatal error of the Windows Update detection mechanism.
> KB951748 (MS08-037) isn't offered to Windows XP SP3 systems *although*
> Windows XP SP3 is still affected by the security hole which is aimed to
> be closed by KB951748.
>
> Looking at Windows Update Catalog for KB951748, you'll find the *false*
> information in the Paket Details, that KB951748 has been superseded by
> Windows XP SP3 which is obviously wrong:
> http://catalog.update.microsoft.com/...d-4acb2b41210e
> (open the link in Internet Explorer and have a look into the "Paket Details")
>
> I can only force to download and install KB951748 (MS08-037) manually
> via DownloadCenter as long as MS doesn't get the error fixed:
> http://www.microsoft.com/downloads/d...8-b38907467cdf
>
> Bye,
> Freu"Sorry for beeing late on this"di

QED: Does it install?

MowGreen [MVP] wrote:
> I second Freudi's observation on the non-offering of KB951748 after the
> application of XP SP3 if it was not installed prior to applying SP3.
> It must be manually downloaded and installed as automatic updating does
> NOT detect that it is needed.
> This appears to be a detection issue and has been brought to MS'
> attention ... we're still waiting for an explanation as to why this is
> occurring.
>
> MowGreen [MVP 2003-2009]
> ===============
> *-343-* FDNY
> Never Forgottten
> ================
>
>
> Ottmar Freudenberger wrote:
>
>> "John" <> schrieb:
>>
>>
>>> I had been holding off on installing KB951748 because of issues with the
>>> version of Zone Alarm I am using. I just installed SP3 for Windows XP
>>> Pro, and I now notice that KB951748 is no longer offered by Windows
>>> Update.
>>
>>
>> This is due to a fatal error of the Windows Update detection mechanism.
>> KB951748 (MS08-037) isn't offered to Windows XP SP3 systems *although*
>> Windows XP SP3 is still affected by the security hole which is aimed to
>> be closed by KB951748.
>>
>> Looking at Windows Update Catalog for KB951748, you'll find the *false*
>> information in the Paket Details, that KB951748 has been superseded by
>> Windows XP SP3 which is obviously wrong:
>> http://catalog.update.microsoft.com/...d-4acb2b41210e
>> (open the link in Internet Explorer and have a look into the "Paket
>> Details") I can only force to download and install KB951748 (MS08-037)
>> manually
>> via DownloadCenter as long as MS doesn't get the error fixed:
>> http://www.microsoft.com/downloads/d...8-b38907467cdf
>>
>> Bye,
>> Freu"Sorry for beeing late on this"di

"PA Bear [MS MVP]" <> schrieb:

> QED: Does it install?

KB951748 (MS08-037) does install fine on Windows XP SP3 systems and
is a *valid and important* update for these systems. But it is still
not beeing deployed via AU/WU/WSUS due to the "detection error" AKA
wrong replacement information in the WU Catalog: KB951748 (MS08-037)
has *NOT* been replaced by SP3.

I've decided to hold my acceptance of my MVP award for 2009 until
this is fixed - due to the fatal error and the obvious incompetence
and unwillingness shown by "some" guys over at MS to fix that damn
error. That's why I don't have access to "some other" newsgroups
since December 31th.

FWIW,
Freudi

As Freudi posted, it does install and updates Tcpip.sys to a higher
Version than the one included in SP3:

After applying SP3 - 5.1.2600.5512 (xpsp.080413-0852)

After *manually* installing KB951748 -
5.1.2600.5625(xpsp_sp3_gdr.080620-1249)

If it wasn't intend for SP3 then why does it show as xpsp_sp3 ?

<drumsfingers> Still awaiting word from Eric about this </drumsfingers>


MowGreen [MVP 2003-2009]
===============
*-343-* FDNY
Never Forgotten
===============



PA Bear [MS MVP] wrote:

> QED: Does it install?
>
> MowGreen [MVP] wrote:
>
>> I second Freudi's observation on the non-offering of KB951748 after the
>> application of XP SP3 if it was not installed prior to applying SP3.
>> It must be manually downloaded and installed as automatic updating does
>> NOT detect that it is needed.
>> This appears to be a detection issue and has been brought to MS'
>> attention ... we're still waiting for an explanation as to why this is
>> occurring.
>>
>> MowGreen [MVP 2003-2009]
>> ===============
>> *-343-* FDNY
>> Never Forgottten
>> ================
>>
>>
>> Ottmar Freudenberger wrote:
>>
>>> "John" <> schrieb:
>>>
>>>
>>>> I had been holding off on installing KB951748 because of issues with
>>>> the
>>>> version of Zone Alarm I am using. I just installed SP3 for Windows XP
>>>> Pro, and I now notice that KB951748 is no longer offered by Windows
>>>> Update.
>>>
>>>
>>>
>>> This is due to a fatal error of the Windows Update detection mechanism.
>>> KB951748 (MS08-037) isn't offered to Windows XP SP3 systems *although*
>>> Windows XP SP3 is still affected by the security hole which is aimed to
>>> be closed by KB951748.
>>>
>>> Looking at Windows Update Catalog for KB951748, you'll find the *false*
>>> information in the Paket Details, that KB951748 has been superseded by
>>> Windows XP SP3 which is obviously wrong:
>>> http://catalog.update.microsoft.com/...d-4acb2b41210e
>>>
>>> (open the link in Internet Explorer and have a look into the "Paket
>>> Details") I can only force to download and install KB951748
>>> (MS08-037) manually
>>> via DownloadCenter as long as MS doesn't get the error fixed:
>>> http://www.microsoft.com/downloads/d...8-b38907467cdf
>>>
>>>
>>> Bye,
>>> Freu"Sorry for beeing late on this"di
>
>