Preventing KB951978 Update

Is there a way of doing a Windows Update WITHOUT KB951978? I don't see that
we can choose which updates to allow.

I believe that the update KB951978 is causing problems with our Internet
connection. I have Norton Firewall not ZoneAlarm as some others have
mentioned. When I do a Restore, the Internet works fine - after an update,
it works only intermittently. And it started with the KB951978 update.

Joan H.

hrw444 wrote:
> Is there a way of doing a Windows Update WITHOUT KB951978? I don't
> see that we can choose which updates to allow.
>
> I believe that the update KB951978 is causing problems with our
> Internet connection. I have Norton Firewall not ZoneAlarm as some
> others have mentioned. When I do a Restore, the Internet works
> fine - after an update, it works only intermittently. And it
> started with the KB951978 update.

Change your Automatic Updates settings and only approve the ones you want to
install.

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html

Thanks for your answer. My problem was in choosing "Express Update" instead
of "Custom".
Joan H.


"Shenan Stanley" wrote:

> hrw444 wrote:
> > Is there a way of doing a Windows Update WITHOUT KB951978? I don't
> > see that we can choose which updates to allow.
> >
> > I believe that the update KB951978 is causing problems with our
> > Internet connection. I have Norton Firewall not ZoneAlarm as some
> > others have mentioned. When I do a Restore, the Internet works
> > fine - after an update, it works only intermittently. And it
> > started with the KB951978 update.
>
> Change your Automatic Updates settings and only approve the ones you want to
> install.
>
> --
> Shenan Stanley
> MS-MVP
> --
> How To Ask Questions The Smart Way
> http://www.catb.org/~esr/faqs/smart-questions.html
>
>
>

Question: If it is dangerous driving your car on a certain road and
someone tells you a way to avoid that danger, do you ignore their advice?

Not applying KB951978 is leaving your system wide open to exploitation
as there are exploits in the wild for the vulnerability that KB951978
mitigates.
The Norton firewall and whatever other security software installed will
be useless against the exploit. So, in effect, you may as well remove
all security software as they are now useless.

http://isc.sans.org/diary.html?storyid=4687

This exploit uses the DNS vulnerability to redirect systems updating
installed software, and, the Mac OS X:
http://blogs.zdnet.com/security/?p=1576

> The first version of the toolkit ships with exploit modules for several widely deployed software,
> including Apple’s Mac OS X and iTunes, WinZip, Winamp, OpenOffice and Sun Java.

But, it's your system, so ... strongly advise you against doing *any*
financial transactions or providing *any* private confidential
information over the internet.


MowGreen [MVP 2003-2008]
===============
*-343-* FDNY
Never Forgotten
===============



hrw444 wrote:

> Thanks for your answer. My problem was in choosing "Express Update" instead
> of "Custom".
> Joan H.
>
>
> "Shenan Stanley" wrote:
>
>
>>hrw444 wrote:
>>
>>>Is there a way of doing a Windows Update WITHOUT KB951978? I don't
>>>see that we can choose which updates to allow.
>>>
>>>I believe that the update KB951978 is causing problems with our
>>>Internet connection. I have Norton Firewall not ZoneAlarm as some
>>>others have mentioned. When I do a Restore, the Internet works
>>>fine - after an update, it works only intermittently. And it
>>>started with the KB951978 update.
>>
>>Change your Automatic Updates settings and only approve the ones you want to
>>install.
>>
>>--
>>Shenan Stanley
>> MS-MVP
>>--
>>How To Ask Questions The Smart Way
>>http://www.catb.org/~esr/faqs/smart-questions.html
>>
>>
>>

Windows version?

Did you mean KB951748?...

MS08-037: Description of the security update for DNS in Windows Server 2003,
in Windows XP, and in Windows 2000 Server (client side): July 8, 2008:
http://support.microsoft.com/kb/951748

If you disable the Norton firewall and then enable the Windows Firewall,
does the behavior persist (with KB951478 installed)?

The vulnerability addressed by KB951748 *is* a big deal and you want it
installed! See
http://blog.washingtonpost.com/secur...et_tues_1.html
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/



hrw444 wrote:
> Is there a way of doing a Windows Update WITHOUT KB951978? I don't see
> that
> we can choose which updates to allow.
>
> I believe that the update KB951978 is causing problems with our Internet
> connection. I have Norton Firewall not ZoneAlarm as some others have
> mentioned. When I do a Restore, the Internet works fine - after an
> update,
> it works only intermittently. And it started with the KB951978 update.
>
> Joan H.