Windows Update Woes

[Myles]

Sorry to hear you're having problems, Garry. Rest assured you are not alone!

I allowed the latest security updates to install last night and had problems that Zonealarm kept blocking any attempt to access the internet. Avast could not check for updates, firefox would load, but couldn't access the homepage (Google),etc. My other computer had no problem. It uses Comodo firewall and Kaspersky AV. When I took Zonealarm off the affected machine, the problem went away, so it now has Comodo as well.

It appears to be some conflict between one of the updates and Zonealarm, so you have a choice of uninstalling the update or replacing Zonealarm.

Good Luck!

Myles

[TSR2]

Hi Guys,

This particular set of updates are very important, and not just a Microsoft problem. The fix I am refering to corrects a problem in DNS which can cause you to be sent to a fake internet site, even if you type in the correct address. This DNS update is required by all computers and networking appliances which use DNS, not just Microsoft ones, although Microsoft and Red Hat have been the first to provide the update.

The problem you are having Garry is because MS have patched the opperating system and zonealarm have not yet provided a fix.

Here is the article...
http://www.vnunet.com/vnunet/news/22212 ... ises-issue

I would emphasise though, this Microsoft patch IS essential.

[forthbridge]

Apparently it also effects some other AV progs, a Goggle will link to various postings about this.

I can say that the particular hotfix in question runs perfectly on this machine (XP SP3, standard XP firewall and Avast home edition AV)

Hope you get it sorted Garry

[Garry Russell]

I run AVG and Zone alarm but long term IE update stop Internet acess.

Even when I have used other AV programmes.

I realise the security issue here which is why I ran the update and the only reason I ran it given the history.

But even disabling the AV I could not get internet access.....I am only here now because I un installed the updates.

I was reading yesterday about the false websites and getting personal info like bank details

I have none of this info online so what is the danger to me??

Garry

[TSR2]

Its not the AV Garry, its your firewall thats causing the problem. And this is NOT an IE update. It replaces a system program called SVCHOST which is core to the underlying network technology on your computer.

The reason that they mention things like phishing for bank details etc is because thats what will give most folk the kick up the arse to apply the patches. In reality it could be any website that you transact with, ebay, paypal, skype... anything at all.

The issue is that Microsoft and Red Hat have fixed it on their systems, Cisco and Lucent will have a fix later this week, but it seems zonealarm and others haven't bothered there arses. This issue was reported in February and since then the global body that manages DNS have been working with vendors to design fixes.

So in reality, this fix does affect you and you need to act on it. To be honnest, you'd be better with the default microsoft firewall and this update, than zonealarm without it.

[Garry Russell]

OK Ben

If I just run the windows update and not the securuty updates will that be OK???...it is security updates that have always been the prob in the past.

Garry

[TSR2]

Hi Garry,

No. Its the security updates that you need. Thats why these are listed as Critical updates.

You have a computer that needs updated, but you don't apply the updates because the firewall doesn't like them. The firewall cannot protect you from things that security updates fix, therefore you'd be better off binning the firewall and applying all of the security updates.

Does that make sense?

[Garry Russell]

Makes sense....if it works

I'll try it again

Garry

[Garry Russell]

Hi Ben

I uninstalled Zone Alarm and re ran the update

Seem OK.so far

So looks like it may have been Zone Alarm upseting the apple cart :think:

Thanks for cleariong that up

And thank to everyone that replied

Fingers crossed

Garry

[petermcleland]

Garry,

I dumped Zone Alarm some years ago when it had a very bad name for causing trouble.

The only Firewall that I use is the native XP one.

Antivirus I use Avast...But I pay for it as it so good.

Antispy I use a few things but the only one I pay for is the Auto-updating version of "SpywareBlaster"...This does not scan but works in the background to keep things out.

I have absolutely no trouble with using "Microsoft Update" and allow it to download in auto but ask me when it want to install...I always allow it