KB951748

I got notified of 3 updates by MS; KB951748, KB951978, and the MRT monthly.
I faithfully downloaded and installed all 3. After reboot, I could not get
back onto the Web. Since KB951748, KB951978 are both IE security updates, I
uninstalled them both, re-booted and was graciously let back on the Web. Of
course MS wanted me to intall them, so sent another gold shield to let me
know. Instead of re-installing both, I first re-installed KB951978,
re-booted, and still got back on the Web, but when I re-installed KB951748,
again, neither my FireFox 3 or IE 7 could browse, so uninstalled KB951748.

Do anyone think MS will fix that "fix" to actually allow use of IE? Or what
settings must I fiddle with to make my sytems work with the KB951748?

The same thing happened identically on 2 XP Pro SP3 systems, and I followed
the same install - uninstall procedure of the security updates. They both
work withOUT the KB951748 uninstalled.

Thanks,
John

Hi IT Lite

Same problem here. Are you running Zone Alarm. If so turn it off and you can
access the internet with all updates installed.

in the meantime we await microsoft to fix the problem.

[NukeTech]

Here is another interesting twist. After installing the two offending updates, I was unable to access the internet like the rest of you. I uninstalled Service Pack 3 and rebooted. I was able to access the internet. I also have Zone Alarm installed. At this point, I will reinstall SP3 and just KB951978.

Gary

ZONEALARM BLOCKS INTERNET BROWSER ACCESS WITH KB951748

After updating from XP patch KB951748 ZoneAlarm can no longer interpret the
difference between programs trying to access the internet.
This causes all DNS packets to be blocked.

TEMPORARY SOLUTION
The only solution is to lower Internet Zone Security to Medium in the
Firewall options tab or disabling the Firewall.

LONG TERM SOLUTION
Uninstall KB951748, do a system restore to 2008-07-07 or wait for another
update from Microsoft or Zone Labs ZoneAlarm.

Kind Regards Ken

"Susan Bradley" wrote:

> Because if you use the native built in firewall there's no issues.

I think you have your work cut out for you convincing most Win users on
that. Susan. :)

In another thread here I see at least one user who doesn't use ZoneAlarm,
but had the same non-connect issue after the KB951748 update. I wouldn't be
surprised if this fix has to fixed and re-offered for download.

I don't know if this will help any but I have noticed that when there is
connection after the install of kb951748 that dns outbound I beleive from my
computer communicates on ports ranging in the upper high level ie 69878,
53181 etc. these also vary almost imediatly folled by a icmp ping to my ip
provider. I have computer scans on my ports repeatadly from china, korea, I
will post a list of the ip addresses that do this the most alot ino the
svhost also, Here are a few doing this right now,

Application:System
Access:Access on unopened UDP port
Object:1026 <- 221.208.127.142:34444
Time:7/29/2008 11:01:51 PM

Application:System
Access:Access on unopened UDP port
Object:1026 <- 122.141.75.3:39705
Time:7/29/2008 10:59:21 PM

Application:svchost.exe
Access:Inbound UDP access
Object:1027 <- 122.141.75.3:39707
Time:7/29/2008 10:59:21 PM

Application:System
Access:Access on unopened UDP port
Object:53181 <- 69.182.218.116:44204
Time:7/29/2008 10:56:00 PM

Application:System
Access:Inbound ICMP access
Object:Ping Request (8) <- 58.55.81.72
Time:7/29/2008 10:55:11 PM

Application:System
Access:Access on unopened UDP port
Object:24051 <- 71.197.244.221:53591
Time:7/29/2008 10:53:05 PM

Thats just a few of the numerous the main thing I wished to relay to anyone
that might be able to use this info to fix this is that the dns out is high
upper ports not the usual 1027 1030 etc. Thank you, onlya1

"IT Lite" wrote:

> I got notified of 3 updates by MS; KB951748, KB951978, and the MRT monthly.
> I faithfully downloaded and installed all 3. After reboot, I could not get
> back onto the Web. Since KB951748, KB951978 are both IE security updates, I
> uninstalled them both, re-booted and was graciously let back on the Web. Of
> course MS wanted me to intall them, so sent another gold shield to let me
> know. Instead of re-installing both, I first re-installed KB951978,
> re-booted, and still got back on the Web, but when I re-installed KB951748,
> again, neither my FireFox 3 or IE 7 could browse, so uninstalled KB951748.
>
> Do anyone think MS will fix that "fix" to actually allow use of IE? Or what
> settings must I fiddle with to make my sytems work with the KB951748?
>
> The same thing happened identically on 2 XP Pro SP3 systems, and I followed
> the same install - uninstall procedure of the security updates. They both
> work withOUT the KB951748 uninstalled.
>
> Thanks,
> John
>
>
>

I am struggling with two updates referred to in these threads, but I do not
have zone alarm. I use McAfee firewall and have the same problems others are
having with Zone Alarm. Anyone else have this experience? Any solutions
without giving up the firewall?

"Macc_eye" wrote:

> Hi IT Lite
>
> Same problem here. Are you running Zone Alarm. If so turn it off and you can
> access the internet with all updates installed.
>
> in the meantime we await microsoft to fix the problem.
>
> regards
> Tony (Macc_Eye)
>
> "IT Lite" wrote:
>
> > I got notified of 3 updates by MS; KB951748, KB951978, and the MRT monthly.
> > I faithfully downloaded and installed all 3. After reboot, I could not get
> > back onto the Web. Since KB951748, KB951978 are both IE security updates, I
> > uninstalled them both, re-booted and was graciously let back on the Web. Of
> > course MS wanted me to intall them, so sent another gold shield to let me
> > know. Instead of re-installing both, I first re-installed KB951978,
> > re-booted, and still got back on the Web, but when I re-installed KB951748,
> > again, neither my FireFox 3 or IE 7 could browse, so uninstalled KB951748.
> >
> > Do anyone think MS will fix that "fix" to actually allow use of IE? Or what
> > settings must I fiddle with to make my sytems work with the KB951748?
> >
> > The same thing happened identically on 2 XP Pro SP3 systems, and I followed
> > the same install - uninstall procedure of the security updates. They both
> > work withOUT the KB951748 uninstalled.
> >
> > Thanks,
> > John
> >
> >
> >

XP Pro SP3
ZA 6.5.737

KB951748 says it cannot be removed.

I cannot upgrade to ZA 7 because my company's VPN can't query it to see if
it is working -- the VPN vendor only supports ZA 6.

Is MS going to release a fix for the fix?



"Harry Johnston [MVP]" wrote:

> Marc Boulware wrote:
>
> > For those who are running into this issue, it should be noted that you must
> > also uninstall KB951746 in addition to KB951748.
>
> Since this is a different, currently unknown issue, you should consider logging
> a free support call:
>
> https://support.microsoft.com/oas/de...spx?gprid=6527
>
> <https://support.microsoft.com/oas/default.aspx?gprid=6527>
>
> Harry.
>

And you problem is...?

Which was installed first, WinXP SP3 or KB951748?

There isn't an uninstall/Remove option for KB951748 or you get a
"Such-and-such may not work if..." prompt when you go to uninstall it?

Start a free Windows Update support incident request:
https://support.microsoft.com/oas/de...spx?gprid=6527

[Sounds to me like your VPN vendor needs to fix something on their/your end,
or you need to replace ZA and the vendor.]
--
~PA Bear


saberman wrote:
> XP Pro SP3
> ZA 6.5.737
>
> KB951748 says it cannot be removed.
>
> I cannot upgrade to ZA 7 because my company's VPN can't query it to see if
> it is working -- the VPN vendor only supports ZA 6.
>
> Is MS going to release a fix for the fix?
<snip>

> There isn't an uninstall/Remove option for KB951748 or you get a
> "Such-and-such may not work if..." prompt when you go to uninstall it?

Change or Remove Programs says:
Security Update for Windows XP (KB951748)
Click here for support information
This update cannot be removed.

> Which was installed first, WinXP SP3 or KB951748?

I am not sure as the entry for Windows XP Service Pack 3 does not show a
date but I think it was installed before SP3. (I was building a new
workstation and did a bulk install of all of the suggested security patches,
then install SP3 and then install some more newly suggested security patches.)

> [Sounds to me like your VPN vendor needs to fix something on their/your end,
> or you need to replace ZA and the vendor.]

Unfortunately, the VPN vendor is not under my control. As to replacing ZA
it appears from the thread that a number of firewalls have the same issue.

"PA Bear [MS MVP]" wrote:

> And you problem is...?
>
> Which was installed first, WinXP SP3 or KB951748?
>
> There isn't an uninstall/Remove option for KB951748 or you get a
> "Such-and-such may not work if..." prompt when you go to uninstall it?
>
> Start a free Windows Update support incident request:
> https://support.microsoft.com/oas/de...spx?gprid=6527
>
> [Sounds to me like your VPN vendor needs to fix something on their/your end,
> or you need to replace ZA and the vendor.]
> --
> ~PA Bear
>
>
> saberman wrote:
> > XP Pro SP3
> > ZA 6.5.737
> >
> > KB951748 says it cannot be removed.
> >
> > I cannot upgrade to ZA 7 because my company's VPN can't query it to see if
> > it is working -- the VPN vendor only supports ZA 6.
> >
> > Is MS going to release a fix for the fix?
> <snip>
>
>

>> Which was installed first, WinXP SP3 or KB951748?
>
> I am not sure as the entry for Windows XP Service Pack 3 does not show a
> date but I think it was installed before SP3.

See Update History at http://windowsupdate.microsoft.com

If WinXP SP3 was installed after you'd installed KB951748, you'd have to
uninstall WinXP SP3 before being able to uninstall KB951748.
--
~PA Bear

saberman wrote:
>> There isn't an uninstall/Remove option for KB951748 or you get a
>> "Such-and-such may not work if..." prompt when you go to uninstall it?
>
> Change or Remove Programs says:
> Security Update for Windows XP (KB951748)
> Click here for support information
> This update cannot be removed.
>
>> Which was installed first, WinXP SP3 or KB951748?
>
> I am not sure as the entry for Windows XP Service Pack 3 does not show a
> date but I think it was installed before SP3. (I was building a new
> workstation and did a bulk install of all of the suggested security
> patches,
> then install SP3 and then install some more newly suggested security
> patches.)
>
>> [Sounds to me like your VPN vendor needs to fix something on their/your
>> end, or you need to replace ZA and the vendor.]
>
> Unfortunately, the VPN vendor is not under my control. As to replacing ZA
> it appears from the thread that a number of firewalls have the same issue.
>
> "PA Bear [MS MVP]" wrote:
>
>> And you problem is...?
>>
>> Which was installed first, WinXP SP3 or KB951748?
>>
>> There isn't an uninstall/Remove option for KB951748 or you get a
>> "Such-and-such may not work if..." prompt when you go to uninstall it?
>>
>> Start a free Windows Update support incident request:
>> https://support.microsoft.com/oas/de...spx?gprid=6527
>>
>> [Sounds to me like your VPN vendor needs to fix something on their/your
>> end, or you need to replace ZA and the vendor.]
>> --
>> ~PA Bear
>>
>>
>> saberman wrote:
>>> XP Pro SP3
>>> ZA 6.5.737
>>>
>>> KB951748 says it cannot be removed.
>>>
>>> I cannot upgrade to ZA 7 because my company's VPN can't query it to see
>>> if
>>> it is working -- the VPN vendor only supports ZA 6.
>>>
>>> Is MS going to release a fix for the fix?
>> <snip>