FIX for ZoneAlarm & KB951748 issue released

Discussion in 'Windows Update' started by PA Bear [MS MVP], Jul 10, 2008.

  1. [Crossposted to Windows Update, WinXP General, IE General, Security,
    Security Home Users newsgroups]

    Resolution [was Workaround] for Sudden Loss of Internet Access Problem
    http://download.zonealarm.com/bin/free/pressReleases/2008/LossOfInternetAccessIssue.html
    (revised multiple times since release on 08 July 2008)

    NB: Do NOT use Option #2 if at all possible! The vulnerability addressed by
    KB951748 *is* a big deal! See
    http://blog.washingtonpost.com/securityfix/2008/07/patch_the_entire_internet_tues_1.html

    Want to consider other, more highly-rated firewalls?
    http://www.matousec.com/projects/firewall-challenge/results.php
     
    PA Bear [MS MVP], Jul 10, 2008
    #1
    1. Advertisements

  2. PA Bear [MS MVP]

    Charles Lee Guest

    Charles Lee, Jul 10, 2008
    #2
    1. Advertisements

  3. [You posted the same link, Charles.]

     
    PA Bear [MS MVP], Jul 10, 2008
    #3
  4. PA Bear [MS MVP]

    Pat Guest

    Thanks PA Bear.....I did the update, installed KB951748 and all is well.

     
    Pat, Jul 10, 2008
    #4
  5. YW, Pat. Thanks for your feedback.
     
    PA Bear [MS MVP], Jul 10, 2008
    #5
  6. Charles Lee wrote:
    ---- Original Message ----
    From: Charles Lee
    Newsgroups:
    microsoft.public.internetexplorer.general,microsoft.public.security,microsof
    t.public.security.homeusers,microsoft.public.windowsupdate,microsoft.public.
    windowsxp.general
    Sent: Thursday, July 10, 2008 9:09 AM Subject: Re: FIX for ZoneAlarm &
    KB951748 issue released
    http://download.zonealarm.com/bin/free/pressReleases/2008/LossOfInternetAccessIssue.html

    There's no new version of ZA on that page. ZA update does not find a new
    version either. All that says on that ZA page is to lower your Internet
    security. I have free ZA version 7.0.470.000, supposedly the most recent.

    I use Firefox. It does not offer a security "slider". In any case its rather
    silly to reduce your internet security so that your MS "security" update
    won't prevent use of a browser. So far my only success has been with
    uninstalling the security update. But I understand its an important update.
    I run W2000 pro / Firefox 3.

    So does this mean the options are, do without an important security update,
    or reduce your security to an unacceptable (to me and many others) level so
    that the update won't shut down browsing, but due to the lowered security,
    browsing will now be less secure?

    This is nuts.

    MartyB in KC
     
    Nunya Bidnits, Jul 10, 2008
    #6
  7. PA Bear [MS MVP]

    Big_Al Guest

    There is! Just look in "recommended actions", This is the link to the
    free version. But if you use something else, just click the version
    you have and download it.

    http://download.zonealarm.com/bin/free/1025_zl/zlsSetup_70_483_000_en.exe
    It works great for me. I loaded the KB patch and screwed my system,
    loaded the new ZA that had been downloaded before the KB update. And
    bingo all is well, ZA and MS working together.
     
    Big_Al, Jul 10, 2008
    #7
  8. PA Bear [MS MVP], Jul 10, 2008
    #8
  9. Sorry, but there ARE links to the latest Version on that page. All of
    the links to the various products go to V. 70.483.000.
    Here's the links:
    ZoneAlarm Internet Security Suite
    http://download.zonealarm.com/bin/free/1043_zl/zaSuiteSetup_70_483_000_en.exe
    ZoneAlarm Pro
    http://download.zonealarm.com/bin/free/1043_zl/zapSetup_70_483_000_en.exe
    ZoneAlarm Antivirus
    http://download.zonealarm.com/bin/free/1043_zl/zaAvSetup_70_483_000_en.exe
    ZoneAlarm Anti-Spyware
    http://download.zonealarm.com/bin/free/1043_zl/zaasSetup_70_483_000_en.exe
    ZoneAlarm Basic Firewall
    http://download.zonealarm.com/bin/free/1025_zl/zlsSetup_70_483_000_en.exe

    Frankly speaking, uninstalling ZA and obtaining a firewall that will
    protect the system and not cause updating issues is possible:

    Firewall Challenge
    http://www.matousec.com/projects/firewall-challenge/results.php

    MowGreen [MVP 2003-2008]
    ===============
    *-343-* FDNY
    Never Forgotten
    ===============
     
    MowGreen [MVP], Jul 10, 2008
    #9
  10. It's named Basic Firewall and it's the free version.

    Galen
     
    Galen Somerville, Jul 10, 2008
    #10
  11. I have looked over and over again. The link was pasted in from the newsgroup
    posts.

    Here is exactly, and only, what I see when I go to that page, cut and
    pasted...

    Severity: High
    Workaround to Sudden Loss of Internet Access Problem

    Date Published : 8 July 2008

    Date Last Revised : 9 July 2008

    Overview : Microsoft Update KB951748 is known to cause loss of
    internet access for ZoneAlarm users

    Impact : Sudden loss of internet access

    Platforms Affected : ZoneAlarm Free, ZoneAlarm Pro, ZoneAlarm
    AntiVirus, ZoneAlarm Anti-Spyware, and ZoneAlarm Security Suite



    Recommended Actions -

    Option 1: Move Internet Zone slider to Medium

    1.. Navigate to the "ZoneAlarm Firewall" panel
    2.. Click on the "Overview" tab
    3.. Move the "Internet Zone" slider to medium
    Option 2: Uninstall the hotfix

    1.. Click the "Start Menu"
    2.. Click "Control Panel", or click "Settings" then "Control
    Panel"
    3.. Click on "Add or Remove Programs"
    4.. On the top of the add/remove programs dialog box, you
    should see a checkbox that says "show updates". Select this checkbox
    5.. Scroll down until you see "Security update for Windows
    (KB951748)"
    6.. Click "Remove" to uninstall the hotfix


    Contact : Check Point customers who are concerned about
    information contained in this advisory or have additional technical
    questions may reach our Technical Support team at:
    http://www.zonealarm.com/store/content/support/support.jsp. To report
    security issues with Check Point products contact
    .

    Disclaimer : The information in the advisory is believed to be
    accurate at the time of publishing based on currently available information.
    Use of the information constitutes acceptance for use in an AS IS condition.
    There are no warranties with regard to this information. Neither the author
    nor the publisher accepts any liability for any direct, indirect, or
    consequential loss or damage arising from use of, or reliance on, this
    information. Check Point and Check Point products, are registered trademarks
    of Check Point Incorporated and/or affiliated companies in the United States
    and other countries. All other registered and unregistered trademarks
    represented in this document are the sole property of their respective
    companies/owners.

    Copyright : Check Point Software Technologies Ltd.
    www.checkpoint.com, is a leader in securing the Internet. The company is a
    market leader in the worldwide enterprise firewall, personal firewall, data
    security and VPN markets. Check PointÂ's PURE focus is on IT security with
    its extensive portfolio of network security, data security and security
    management solutions. Through its NGX platform, Check Point delivers a
    unified security architecture for a broad range of security solutions to
    protect business communications and resources for corporate networks and
    applications, remote employees, branch offices and partner extranets. The
    company also offers market leading data security solutions through the
    Pointsec product line, protecting and encrypting sensitive corporate
    information stored on PCs and other mobile computing devices. Check Point's
    award-winning ZoneAlarm Internet Security Suite and additional consumer
    security solutions protect millions of consumer PCs from hackers, spyware
    and data theft. Extending the power of the Check Point solution is its Open
    Platform for Security (OPSEC), the industry's framework and alliance for
    integration and interoperability with "best-of-breed" solutions from
    hundreds of leading companies. Check Point solutions are sold, integrated
    and serviced by a network of Check Point partners around the world and its
    customers include 100 percent of Fortune 100 companies and tens of thousands
    of businesses and organizations of all sizes. ©2003Â-2007 Check Point
    Software Technologies Ltd. All rights reserved. Check Point, AlertAdvisor,
    Application Intelligence, Check Point Express, Check Point Express CI, the
    Check Point logo, Check Point Pointsec Protector, ClusterXL, Confidence
    Indexing, ConnectControl, Connectra, Connectra Accelerator Card, Cooperative
    Enforcement, Cooperative Security Alliance, CoSa, DefenseNet, Dynamic
    Shielding Architecture, Eventia, Eventia Analyzer, Eventia Reporter, Eventia
    Suite, FireWall-1, FireWall-1 GX, FireWall-1 SecureServer, FloodGate-1,
    Hacker ID, Hybrid Detection Engine, IMsecure, INSPECT, INSPECT XL,
    Integrity, Integrity Clientless Security, Integrity SecureClient,
    InterSpect, IPS-1, IQ Engine, MailSafe, NG, NGX, Open Security Extension,
    OPSEC, OSFirewall, Pointsec, Pointsec Mobile, Policy Lifecycle Management,
    Provider-1, Safe@Home, Safe@Office, SecureClient, SecureClient Mobile,
    SecureKnowledge, SecurePlatform, SecurePlatform Pro, SecuRemote,
    SecureServer, SecureUpdate, SecureXL, SecureXL Turbocard, Sentivist,
    SiteManager-1, SmartCenter, SmartCenter Express, SmartCenter Power,
    SmartCenter Pro, SmartCenter UTM, SmartConsole, SmartDashboard,
    SmartDefense, SmartDefense Advisor, Smarter Security, SmartLSM, SmartMap,
    SmartPortal, SmartUpdate, SmartView, SmartView Monitor, SmartView Reporter,
    SmartView Status, SmartViewTracker, SofaWare, SSL Network Extender, Stateful
    Clustering, TrueVector, Turbocard, UAM, UserAuthority, User-to-Address
    Mapping, UTM-1, VPN-1, VPN-1 Accelerator Card, VPN-1 Edge, VPN-1 Express,
    VPN-1 Express CI, VPN-1 Power, VPN-1 Power VSX, VPN-1 Pro, VPN-1
    SecureClient, VPN-1 SecuRemote, VPN-1 SecureServer, VPN-1 UTM, VPN-1 UTM
    Edge, VPN-1 VSX, Web Intelligence, ZoneAlarm, ZoneAlarm Anti-Spyware,
    ZoneAlarm Antivirus, ZoneAlarm Internet Security Suite, ZoneAlarm Pro,
    ZoneAlarm Secure Wireless Router, Zone Labs, and the Zone Labs logo are
    trademarks or registered trademarks of Check Point Software Technologies
    Ltd. or its affiliates. ZoneAlarm is a Check Point Software Technologies,
    Inc. Company. All other product names mentioned herein are trademarks or
    registered trademarks of their respective owners. The products described in
    this document are protected by U.S. Patent No. 5,606,668, 5,835,726,
    5,987,611, 6,496,935, 6,873,988, 6,850,943, and 7,165,076 and may be
    protected by other U.S. Patents, foreign patents, or pending applications.
    Any reproduction of this alert other than as an unmodified copy of this file
    requires authorization from Check Point. Permission to electronically
    redistribute this alert in its unmodified form is granted. All other rights,
    including the use of other media, are reserved by Check Point Software
    Technologies Inc.




















    Partners | Site Map | Privacy Policy | Terms of Use | Contact Us
    ©2003-2008 Check Point Software Technologies Ltd. All rights reserved.
    The TRUSTe program covers only information that is collected through
    this Web site, and does not cover information that may be collected through
    software downloaded from the site. Use of the Circuit City name and/or logo
    is by permission of Circuit City Stores, Inc. Circuit City is not a sponsor
    of this program or offer.
     
    Nunya Bidnits, Jul 10, 2008
    #11
  12. Thanks for that link, I will check it out. Obviously nobody believes me that
    there was no link to an update on the ZA page, so I cut and pasted the
    entire page and posted it in another thread here on the same subject. You'll
    see that there is no link for the 483 update. I'm gonna give it a try with
    the link you provided..... thanks.

    MartyB in KC
     
    Nunya Bidnits, Jul 10, 2008
    #12
  13. PA Bear [MS MVP]

    Joan Archer Guest

    <lol> I just got rid of ZA <g>
     
    Joan Archer, Jul 10, 2008
    #13
  14. OK, I just refreshed the page and now its there. But you can see from the
    cut and paste it wasn't there, at least not for a while. The "date last
    revised" on that page has not changed, July 9. I may be crazy but I ain't
    stupid, when everyone said it was there I tried that page several times, and
    have never navigated to it before today, so it was not in my cache.

    There's something scwewy awound hea...
    Elmer Fudd

    MartyB in KC
     
    Nunya Bidnits, Jul 10, 2008
    #14
  15. Nunya Bidnits wrote:
    That page has been revised at least four (4) times since it was first
    published on 08 July 2008.
     
    PA Bear [MS MVP], Jul 10, 2008
    #15
  16. Well, some dimbulb revised it at least once without the update links....
    sheesh.

    MartyB in KC
     
    Nunya Bidnits, Jul 11, 2008
    #16
  17. PA Bear [MS MVP]

    Phyllis Guest

    After installing the latest updates I was having internet connection
    problems with both my cable and wireless router on a computer that does not
    have Zone Alarms installed. I am using Windows Firewall and AVG anti-virus.
    All the responses I have read have been like the only ones that are having a
    problem with internet connection after the updates are the ones running
    Zonelabs products. My fix was to do a system restore back to before the
    updates and marked them not to install again. I'm going to leave it that
    way until Microsoft comes up with a fix for their fix.


     
    Phyllis, Jul 12, 2008
    #17
  18. ZA's had the fix for several days now:

    Resolution [was Workaround] for Sudden Loss of Internet Access Problem
    (revised multiple times since release on 08 July 2008)
    http://download.zonealarm.com/bin/free/pressReleases/2008/LossOfInternetAccessIssue.html

    NB: Do NOT use Option #2 if at all possible! The vulnerability addressed by
    KB951748 *is* a big deal! See
    http://blog.washingtonpost.com/securityfix/2008/07/patch_the_entire_internet_tues_1.html

    Want to consider other, more highly-rated firewalls?
    http://www.matousec.com/projects/firewall-challenge/results.php
    --
    ~Robear Dyer (PA Bear)
    MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
    AumHa VSOP & Admin http://aumha.net
    DTS-L http://dts-l.net/

     
    PA Bear [MS MVP], Jul 12, 2008
    #18
  19. PA Bear [MS MVP]

    Phyllis Guest

    So this fix works even if you are not running Zone Alarms?

     
    Phyllis, Jul 12, 2008
    #19
  20. PA Bear [MS MVP]

    Charles Lee Guest

    nope... only for pc's with zone alarm installed.... (like you would expect)



    me thinks PA Bear didn't read your previous post properly before
    respnoding....


     
    Charles Lee, Jul 12, 2008
    #20
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.