ZoneAlarm & KB951748 - My Fix Works!

ZoneAlarm & KB951748 - Where's my internet?

My solution that actually works after trying all those below and on
every other post, and you can keep all your other settings alone:

1. Open ZoneAlarm's 'Firewall' tab.
2. Click the 'Custom' button under 'Internet Zone Security'.
3. On the 'Internet Zone' section scroll down to 'Allow outgoing UDP
ports'.
4. Check it and enter "80-3000", click 'Apply' button.
5. Do the same for 'Allow outgoing TCP ports'.
6. Click OK.

* The range "80-3000" is just a guess on my part, if anyone knows a
better range please post it.

Please post success or failure, thank you.


ZoneAlarm is investigating the issue with Microsoft update KB951748:
http://forum.zonelabs.org/zonelabs/b...hread.id=52785

To solve this, just reset the ZA database and the ZA will be "fresh" as
when it was first installed:
http://forum.zonelabs.org/zonelabs/b...ssage.id=52727

ZoneAlarm Customer Care How to Perform a Clean Install:
http://www2.nohold.net/noHoldCust542...n_install.html

MS update KB951748 and ZoneAlarm:
http://www.dslreports.com/forum/r207...eAlarm-PROBLEM

*** Where the real blame lies!!!
Dan Kaminsky Discovers Fundamental Issue In DNS: Massive Multivendor
Patch Released:
http://securosis.com/2008/07/08/dan-...atch-released/

To find out if the DNS server you use is vulnerable:
http://doxpara.com/


ju.c

It'll be interesting to see how this works for other folks, ju.c.

I'm more prone to to go with ZoneAlarm's suggestion on this (link below) and
let the MS/ZoneAlarm people earn thier big bucks :)

My "I am happy you found a solution (work-around) for the problem - but as
you implied yourself (above) - it is a moot point now." was confirming what
you had said ("Before the latest ZoneAlarm update") and pointing out you
knew what your solution meant now (the real solution has been released, a
work-around is unnecessary.)

In my opinion, you saying, "My solution that actually works after trying all
those below and on every other post" means very little unless you specify
the posts and what you have tried - after all - who knows what you see in
comparison to what I see on these newsgroups (depends on how your news
server synchronizes, what news server you use, when you check for new posts,
how often, how your newsreader is configured, etc.)

I gave the (now moot) solution I did because in your list of options (a
later post of yours, quoted above) - you did not include the solution I
quoted as one of the options being compared to. It was - actually - a more
secure option than the one you provided and confirmed to work by many
people.

In other words - I had/have no argument with you, congratulated you on
finding a solution that worked for you, gave an additional (now moot)
solution and made sure anyone reading this thread knew there was an official
fix and that nothing in this thread really mattered beyond that anymore.

Do not mess around with zone alarm settings this could open a can of worms
instead visit

http://download.zonealarm.com/bin/fr...cessIssue.html

download the update voila - all fixed

If you want to know why this has happened visit -

http://news.bbc.co.uk/1/hi/technology/7499260.stm

Also don't at any cost uninstall or remove the Microsoft update this is a
critical update for your own browsing security

Now I'm not a network security expert, but I do know [and probably obvious]
that the less you enable to the Internet, the better.

When someone tries to hack into your system [all this of course is an
example], they will use a utility to scan ports to see which are accessible.
Once the port is open, they could have access to your PC.

Alternatively, if your PC was infected with a trojan and you opened a bunch
of ports, the trojan may be programmed well enough to exit your PC through an
open port.

I used "ju.c" suggestion on my ZA Security Suite. It worked. Thanks "ju.c".
Later I removed the "ju.c" suggestion and went to Zonelabs web site and
downloaded new version of ZA Security Suite. It gave me Internet access.
Also it starting a virus/spyware scan automatically. Everything seems to
normal.

I'm going to enlighten you once and for all, you stupid fool, Gis Bun!

(Before the latest ZoneAlarm update)

Option 1
What to do - Move the slider from Stealth to Medium.
What it does - Enables all outgoing ports. (and more)

Option 2
What to do - Uninstall KB951748.
What it does - Leaves you vulnerable.

Option 3
What to do - Uninstall ZoneAlarm and use the Windows firewall.
What it does - Keep KB951748. Loose ZoneAlarm. No outgoing port control.

My Option 4
What to do - Only allow limited outgoing ports.
What it does - Keeps ZoneAlarm on Stealth. You keep KB951748. Only a few
outgoing opened ports. Almost full security maintained.

I am happy you found a solution (work-around) for the problem - but as you
implied yourself (above) - it is a moot point now. Zone Alarm admitted and
repaired their issue by releasing an update.

What the last sentence says to me is, "everything else done prior to the
update (your solution included) was not the optimum solution and now there
*is* an optimum solution for those who feel they need something like Zone
Alarm to 'protect' their system - which is to update to the latest version."

There actually was a 'more secure option' than any of the ones listed above
(before the patch - again this is a moot point) available out there...

-----
Add your DNS servers to trusted zone

1. From the "Overview" panel, select the "Firewall" panel then click on the
"Zones" tab
2. Click "Add", then select "IP address" from the shortcut menu. The Add IP
Address dialog appears. Select "trusted" from the Zone drop-down list
3. Type the IP address and a description in the boxes provided, then click
"OK"
4. If you are not sure what IP addresses to add:
- Click the Start Menu
- Click on Run. Type "cmd.exe"
- In the command prompt type: "ipconfig /all". Look for DNS Server(s)
in the output of the command.
- For each IP address listed, navigate to the "Zones" panel of the
"Firewall" tab, add the IP address, select "Trusted Zone", and
press "Apply"
5. After you are done adding DNS servers click the "Apply" button
-----

But again - all a moot point now.

If someone feels they need the 'protection' that Zone Alarm gives them over
that of the Windows SP2 Firewall - then their best course of action is to
apply the latest version of Zone Alarm as suggested by the manufacturer
themselves. I hope that anyone still out there experiencing this issue and
searching for an answer that happens across this conversation first does
*that* suggestion above all others (but - they are welcome to do the rest -
their life.)

I really appreciate your trying, but it didn't resolve the issue for me. I
keep getting blank white pages where the update should be. I don't know if
this is of any use, but I used to get the Google search page when I tried to
update Microsoft. Now I get www.my.yahoo.com as the URL, but it only shows a
blank white page.

Jenondelina wrote:
> I really appreciate your trying, but it didn't resolve the issue
> for me. I keep getting blank white pages where the update should
> be. I don't know if this is of any use, but I used to get the
> Google search page when I tried to update Microsoft. Now I get
> www.my.yahoo.com as the URL, but it only shows a blank white page.

What does your problem have to do with what you are replying to?

Download, install, run, update and perform a full scan (separately) with the
following two applications (freeware versions are the ones to use for this):

SuperAntiSpyware
http://www.superantispyware.com/

MalwareBytes
http://www.malwarebytes.com/

After performing a full scan with one and then the other and removing
whatever they both find completely, you may uninstall these products,
if you wish.

Reboot.

Start button --> RUN and type in:
%SystemRoot%\system32\net stop wuauserv
--> Click OK.

Start button --> RUN and type in:
%SystemRoot%\system32\regsvr32 %SystemRoot%\system32\wups2.dll
--> Click OK.

Start button --> RUN and type in:
%SystemRoot%\system32\net start wuauserv
--> Click OK.

Download the latest version of the Windows Update agent from here (x86):
http://go.microsoft.com/fwlink/?LinkID=91237
.... and save it to the root of your C:\ drive. After saving it to the root
of the C:\ drive, do the following:

Close all Internet Explorer windows and other applications.

Start button --> RUN and type in:
%SystemDrive%\windowsupdateagent30-x86.exe /WUFORCE
--> Click OK.

(If asked, select "Run.) --> Click on NEXT --> Select "I agree" and click on
NEXT --> When it finishes installing, click on "Finish"...

Reboot.

Download/Install the latest Windows Installer:
http://www.microsoft.com/downloadS/d...displaylang=en

Reboot.

Log on as an user with administrative rights and open Internet Explorer and
visit http://windowsupdate.microsoft.com/ and select to do a CUSTOM scan...
(Every time you are about to click on something while at these web pages -
first press and hold down the CTRL key while you click on it. You can
release the CTRL key after clicking each time.)

Once the scan is done, select just _ONE_ of the high priority updates
(deselect any others) and install it.

Reboot again.

If it did work - try the web page again - selecting no more than 3-5 at a
time.

The Optional Software updates are generally safe - although I recommend
against the "Windows Search" one. I would completely avoid the Optional
Hardware updates.

Come back - let us know if that worked.
.... Really - come back and let everyone know if that worked.

If it seemed to have failed, do this:

Click Start, and then click Run.
In the Open box, type: %windir%\windowsupdate.log
and then click OK.

Scroll down towards the bottom for the latest entries to locate any error
code(s) or explanation as to why the page cannot be displayed.

You can copy/paste the last 50 or so lines here...

How to read the Windowsupdate.log file:
http://support.microsoft.com/kb/902093

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html