KB951748

Discussion in 'Windows Update' started by IT Lite, Jul 8, 2008.

  1. For those who are running into this issue, it should be noted that you must
    also uninstall KB951746 in addition to KB951748. Each uninstall will require
    a reboot, but afterwards, you will have connectivity again. This 2nd step was
    necessary because my Virtual SMTP Server (for E2k3) would not start (even
    though everything else worked). Uninstalling KB951746 (and another reboot),
    and I was back up and going. Something is really wrong with those patches. We
    are behind a managed firewall, so I think I will simply pass on these two
    patches for now. Between this, and deploying the "XP SP3 OPT OUT TOOL"
    (SPBlockerTools.exe), I'm patched out!!

    -MB
     
    Marc Boulware, Jul 11, 2008
    #41
    1. Advertisements

  2. Harry Johnston [MVP], Jul 11, 2008
    #42
    1. Advertisements

  3. IT Lite

    web_builder Guest

    Microsoft is trash; go to MacOS or Linux.

    I am so sick of supporting their crap, and they only get worse every year.
    They don't have any pride because if they did, then they would perform a
    little QC check before pushing their junk to all of us. So then: we can
    receive it, feel warm and fuzzy about our "support and protection", reboot
    the computer, and begin cussing.

    Thanks for listening.
     
    web_builder, Jul 11, 2008
    #43
  4. IT Lite

    onlya1 Guest

     
    onlya1, Jul 30, 2008
    #44
  5. IT Lite

    onlya1 Guest

    I don't know if this will help any but I have noticed that when there is
    connection after the install of kb951748 that dns outbound I beleive from my
    computer communicates on ports ranging in the upper high level ie 69878,
    53181 etc. these also vary almost imediatly folled by a icmp ping to my ip
    provider. I have computer scans on my ports repeatadly from china, korea, I
    will post a list of the ip addresses that do this the most alot ino the
    svhost also, Here are a few doing this right now,

    Application:System
    Access:Access on unopened UDP port
    Object:1026 <- 221.208.127.142:34444
    Time:7/29/2008 11:01:51 PM

    Application:System
    Access:Access on unopened UDP port
    Object:1026 <- 122.141.75.3:39705
    Time:7/29/2008 10:59:21 PM

    Application:svchost.exe
    Access:Inbound UDP access
    Object:1027 <- 122.141.75.3:39707
    Time:7/29/2008 10:59:21 PM

    Application:System
    Access:Access on unopened UDP port
    Object:53181 <- 69.182.218.116:44204
    Time:7/29/2008 10:56:00 PM

    Application:System
    Access:Inbound ICMP access
    Object:ping Request (8) <- 58.55.81.72
    Time:7/29/2008 10:55:11 PM

    Application:System
    Access:Access on unopened UDP port
    Object:24051 <- 71.197.244.221:53591
    Time:7/29/2008 10:53:05 PM

    Thats just a few of the numerous the main thing I wished to relay to anyone
    that might be able to use this info to fix this is that the dns out is high
    upper ports not the usual 1027 1030 etc. Thank you, onlya1
     
    onlya1, Jul 30, 2008
    #45
  6. That's expected. This is actually the correct behaviour by the relevant
    internet standard; Windows should have always used the high port numbers for
    dynamically assigned ports.

    <http://support.microsoft.com/kb/953230>

    http://support.microsoft.com/kb/953230

    <http://www.iana.org/assignments/port-numbers>

    http://www.iana.org/assignments/port-numbers

    Harry.
     
    Harry Johnston [MVP], Jul 30, 2008
    #46
  7. IT Lite

    Sheriknh Guest

    I am struggling with two updates referred to in these threads, but I do not
    have zone alarm. I use McAfee firewall and have the same problems others are
    having with Zone Alarm. Anyone else have this experience? Any solutions
    without giving up the firewall?
     
    Sheriknh, Aug 3, 2008
    #47
  8. IT Lite

    saberman Guest

    XP Pro SP3
    ZA 6.5.737

    KB951748 says it cannot be removed.

    I cannot upgrade to ZA 7 because my company's VPN can't query it to see if
    it is working -- the VPN vendor only supports ZA 6.

    Is MS going to release a fix for the fix?
     
    saberman, Sep 14, 2008
    #48
  9. And you problem is...?

    Which was installed first, WinXP SP3 or KB951748?

    There isn't an uninstall/Remove option for KB951748 or you get a
    "Such-and-such may not work if..." prompt when you go to uninstall it?

    Start a free Windows Update support incident request:
    https://support.microsoft.com/oas/default.aspx?gprid=6527

    [Sounds to me like your VPN vendor needs to fix something on their/your end,
    or you need to replace ZA and the vendor.]
    --
    ~PA Bear

    <snip>
     
    PA Bear [MS MVP], Sep 14, 2008
    #49
  10. IT Lite

    saberman Guest

    There isn't an uninstall/Remove option for KB951748 or you get a
    Change or Remove Programs says:
    Security Update for Windows XP (KB951748)
    Click here for support information
    This update cannot be removed.
    I am not sure as the entry for Windows XP Service Pack 3 does not show a
    date but I think it was installed before SP3. (I was building a new
    workstation and did a bulk install of all of the suggested security patches,
    then install SP3 and then install some more newly suggested security patches.)
    Unfortunately, the VPN vendor is not under my control. As to replacing ZA
    it appears from the thread that a number of firewalls have the same issue.

     
    saberman, Sep 15, 2008
    #50
  11. Which was installed first, WinXP SP3 or KB951748?
    See Update History at http://windowsupdate.microsoft.com

    If WinXP SP3 was installed after you'd installed KB951748, you'd have to
    uninstall WinXP SP3 before being able to uninstall KB951748.
    --
    ~PA Bear
     
    PA Bear [MS MVP], Sep 15, 2008
    #51
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.