main
Report a problem

Microsoft update kills ZoneAlarm

Daniel Fleshbourne   on 09 July 2008 - 08:55 · 46 comments & 23659 views

Advertisement (Why?)
PUNTERS who use the ZoneAlarm security package might not want to install MS update KB951748. According to several news groups, the first thing you will notice after running the update is that your internet connection dies as KB951748 made changes to the networking files that Zonealarm doesn't like. It then decides to block everything just to be safe.

You can get around the problem by setting the Internet Zone Security permission slider from high to medium and that will give you your connection back but that is not really a good idea if you want high security. Sniffing around the forums we found similar advice although, apparently, the best bet is to reset the ZoneAlarm database.

View: The full story @ The Inq

Post a comment · Send to friend Comments · There are 46 additional comments
(4 replies) #1 +xiphi on 09 Jul 2008 - 09:01
I first heard of this issue from a friend last night. Glad, I don't use it. *hugs his Windows Live OneCare*
#1.1 cyberdrone2000 on 09 Jul 2008 - 18:38
(xiphi said @ #1)
Glad, I don't use it. *hugs his Windows Live OneCare*

Are you serious? I didn't think anyone actually used that, let alone likes it enough to *hug* it.

OneCare has repeatedly proven to have extremely sub-par anti-virus, catching only about 80% of known and unknown infections on test systems, both viruses and spyware (Other companies, including Norton, are above 97%). It's also been compared to Norton Internet Security Suite in terms of system resource usage (read: high memory usage).

Now, my comparisons to Norton are a bit unfair, as I wouldn't use that either.
There are some amazing products out in terms of AV and Firewall (Google them):
I use these personally, recommend them to my clients, and gladly support the developers.
Anti Virus:
  • AVG Free
  • Avast!
  • Nod32

Anti-Spyware:
  • Spybot S&D
  • Lavasoft Ad-Aware
  • AVG Antispyware

Firewall:
  • Comodo Firewall


See: AV-Comparatives for a list of AV Comparisons/options.

With all these options, there is NO reason to be using shovelware like OneCare. Microsoft's attempt at capturing the AV/IS market was truly pathetic, with lackluster, feature-less and generally poorly functioning software across the board.

Last edited by cyberdrone2000 on 09 Jul 2008 - 18:44
#1.2 NPGMBR on 09 Jul 2008 - 22:30
Quite happy with Live Onecare myself. Been using it for a little over a year and not a single problem.
#1.3 Airlink on 10 Jul 2008 - 05:46
Really, OneCare was pathetic from day-one.
Seriously, do a little research and you'll see how craptastic OneCare is. It's got more holes than a block of swiss cheese.

If you've got Avast, AVG or Nod32 and a good hardware-based firewall, it doesn't get any better than that.
#1.4 +xiphi on 10 Jul 2008 - 06:12
I don't need to research how "craptastic" OneCare is. It's done its job on all of the pc's I have it installed on. My mom's pc has been virusless since I put it on her pc. It does not nag me to death, and it actually does a good job.

So, I'll end with this: Research has nothing on personal experience.
#2 C++ on 09 Jul 2008 - 09:01
You can get around the problem by setting the Internet Zone Security permission slider from high to medium

You could also get around the problem by not using crap like ZoneAlarm. Windows Firewall is fine for the smidgen of security that any software firewall is. And if you are serious about security, just get a router. Faster and more secure.
#3 devHead on 09 Jul 2008 - 09:10
You could also get around the problem by not using crap like ZoneAlarm.


Aye to that. It's a shame because not too many years ago ZoneAlarm free firewall was a great product. Frankly, if you have Vista though, you don't really need another firewall solution.
#4 +betadan on 09 Jul 2008 - 09:16
Oh god the humanity, I work for an ISP and we are getting tons of calls about this (blaming us of course). Bahhhh
#5 Relativity_17 on 09 Jul 2008 - 09:54
(2 replies) #6 Atlonite on 09 Jul 2008 - 09:57
Freakin M.S. gotta break stuff in the name of updates not only did it frag peoples zonealarm but it also affected people with two or more Nics in a network bridge setup. as it did for me i had to disable the bridge to regain access to the internet with either maxthon or IE. strange as this was though i could use messanger live and i could ping sites without a problem once again we get shafted by the great Microshaft machine
#6.1 ahhell on 09 Jul 2008 - 11:01
By "we", don't you mean just you.
Your use of "Microshaft" was pretty clever.
#6.2 vetmarkjensen on 09 Jul 2008 - 11:24
(ahhell said @ #6.1)
By "we", don't you mean just you.
I think he means other ZoneAlarm users as well. This isn't just an issue for Atlonite only.

(ahhell said @ #6.1)
Your use of "Microshaft" was pretty clever.
I agree. It's like using M$. It helps you identify rants you can skip over.
(2 replies) #7 franzon on 09 Jul 2008 - 12:00
Vista users are NOT affected
The title of the news should be "Microsoft update kills ZoneAlarm on XP"

Last edited by franzon on 09 Jul 2008 - 12:06
#7.1 vetmarkjensen on 09 Jul 2008 - 12:56
As far as I can see, KB951748 isn't for Vista.

Might as well also post that Windows 95, 98, Me, 3.11 users are also not affected.
#7.2 Atlonite on 12 Jul 2008 - 12:41
(franzon said @ #7)
Vista users are NOT affected
The title of the news should be "Microsoft update kills ZoneAlarm on XP"


oh ok so why is it then that my MS Vista was broken by that exact update
(1 reply) #8 tsutton on 09 Jul 2008 - 12:27
To be honest, blaming Microsoft is wrong.

Microsoft does not know what Zonealarm is doing in the background. Only Zonealarm as they wrote the software.

If Zonealarm breaks down when there is a new patch, Zonealarm need to rewrite their software a bit better.

You can't except Microsoft to test every single software with different version out there.

If Zonealarm want to keep their software working better, they should have signed up with Microsoft to receive the beta patches!
#8.1 hardgiant on 10 Jul 2008 - 08:07
(tsutton said @ #
To be honest, blaming Microsoft is wrong.

Microsoft does not know what Zonealarm is doing in the background. Only Zonealarm as they wrote the software.

If Zonealarm breaks down when there is a new patch, Zonealarm need to rewrite their software a bit better.

You can't except Microsoft to test every single software with different version out there.

If Zonealarm want to keep their software working better, they should have signed up with Microsoft to receive the beta patches!


Microsoft patches have broken a lot of software in the past. I'm sure some major and even minor changes to Windows can cause problems with dozens of applications.

#9 xtreme35967 on 09 Jul 2008 - 12:31
I am in the same boat. Got into work this morning and Automatic Updates had been installed. Then I try to launch Fire Fox and it blocked Google of all things. I have a support ticket in with Zone Alarm so I am waiting to hear back from them on the issue. In the article it is mentioned that we could clear the database. How would I go about doing that and does it work?
#10 warwagon on 09 Jul 2008 - 12:34
Get a nat router. dump zone alarm Problem solved
(2 replies) #11 xtreme35967 on 09 Jul 2008 - 12:41
Dont be an ASS. Routers still dont block everything.
#11.1 MioTheGreat on 10 Jul 2008 - 04:34
They'll block all incoming, though.
#11.2 Airlink on 10 Jul 2008 - 05:50
Some routers at the retail level only filter incoming, but the higher-end ones are designed better than that.
#12 Faisal Islam on 09 Jul 2008 - 13:03
ZoneAlam should start from core.
#13 tsupersonic on 09 Jul 2008 - 13:19
People still use zone alarm?
#14 thenonhacker on 09 Jul 2008 - 13:51
What is this "Zone Alarm"?
#15 Mayhem on 09 Jul 2008 - 14:01
zone alarm was good back in the days of xp, now gives more problems than it worth (speaking has computer tech and repair many users computers)

now if anyone wants a free firewall just install comodo personal firewall and your done
#16 ghostwind on 09 Jul 2008 - 14:05
dare I say... finally an update from Microsoft that is actually useful?

//flame on
/// kidding, XP is still a solid OS
(2 replies) #17 C_Guy on 09 Jul 2008 - 15:10
It's hilarious to see people relying on a router alone. Makes me wonder if IT is their day job ha ha ha.
#17.1 xtreme35967 on 09 Jul 2008 - 15:17
(C_Guy said @ #17)
It's hilarious to see people relying on a router alone. Makes me wonder if IT is their day job ha ha ha.


That's what I was thinking too.
#17.2 vetneufuse on 09 Jul 2008 - 15:39
(C_Guy said @ #17)
It's hilarious to see people relying on a router alone. Makes me wonder if IT is their day job ha ha ha.


Hey I rely on my router alone... *cough* it being an ISA server though that connects to a metro-ethernet conection *cough*
(2 replies) #18 hardgiant on 09 Jul 2008 - 16:23
As the only admitted proud user of ZoneAlarm Security Suite, I feel safe knowing it has stopped many malicious ware on my pc.

The problems crop up because Windows itself is so poorly written from a security point. It seems like every file needs access to the internet for Windows to work properly.
#18.1 HawkMan on 09 Jul 2008 - 18:41
What s your proffesional basis to judge that windows is poorly "written" ....
#18.2 hardgiant on 10 Jul 2008 - 05:59
(HawkMan said @ #18.1)
What s your proffesional basis to judge that windows is poorly "written" ....


Windows is poorly written when it comes to internet security. Thousands of files and components can access the internet at any time. Only using a good outbound Firewall can you see the number of apps and components that try to make outbound calls.

It's a Trojans paradise.

#19 Gabe3 on 09 Jul 2008 - 17:15
zonealarm still doesn't have a zonealarm pro for vista x64. pathetic.
#20 purush on 09 Jul 2008 - 17:55
Zone Alarm is the most effective security software. I have been using it for many years and find it very helpful in blocking threats of all kind. I do not go on the internet without it.
#21 shinji257 on 09 Jul 2008 - 18:41
*deleted*
#22 Screaming Slave on 09 Jul 2008 - 18:46
Okay, so let me see if I understand this correctly: Microsoft issues an update to upgrade networking components. However, Windows users that have ZoneAlarm installed update their systems and the connection breaks. Why is this Microsoft's fault? From my understanding, Zone Labs/Checkpoint should update their program and patch the issue themselves, since Microsoft's update obviously doesn't cripple Windows. But of course, there will be the occasional ******* that will blame Microsoft anyway. Get a clue (and a life while you're at it).
#23 ThaCrip on 10 Jul 2008 - 02:00
the heck with Zonealarm.... it's pretty much useless for incoming traffic, it's ONLY use is basically outbound.

bottom line just get a router and install DD-WRT (third party firmware) to it and be done.... cause to me a firewall like zone alarm aint even worth using the resources to run it.
(2 replies) #24 Shiranui on 10 Jul 2008 - 04:09
COMODO
#24.1 Airlink on 10 Jul 2008 - 05:56
+1
Comodo is sort of the "spiritual successor" to the now-defunct Sygate Personal Firewall, which was great... in it's day. I've tried Comodo, and it works as advertised.
I still say a hardware firewall is the way to go, but if you absolutely must go with a software firewall, then give Comodo a try.
#24.2 intrinsik4 on 10 Jul 2008 - 06:53
Comodo is free, but not all-that.

1. In the name of resources and conciseness, the program doesn't log 'similar' connections - and there is no option to have it log everything.
2. The rules system is redundant, inefficient, and its navigation is clunky at best.
3. It requires manual resetting of local network address zones (bad for people like me who moves to a different IP multiple times a year)
4. It does not show all your current open connections in network activity.
5. It does not show or represent in anyway hardware level packets from router to computer.

It's nice that it's so secure... but I prefer a program that gives more respect to its user.
(1 reply) #25 bush on 10 Jul 2008 - 07:07
do i understand it correctly. microsoft issues a patch for windows which changes/fixes something and third party app does not like this official patch and decides to block everything? c'mon the title should be "zonealarm kills windows".
#25.1 franzon on 10 Jul 2008 - 09:20
(bush said @ #1)
c'mon the title should be "zonealarm kills windows".



the title should be "zonealarm kills windows XP". Vista is immune to DNS flaw (yet another reason to use Vista ).
#26 Yak on 10 Jul 2008 - 10:31
I use Look'n'Stop and it's killed that too.

Solutions here :>

http://www.neowin.net/forum/index.php?showtopic=648196
#27 LipSmacker on 11 Jul 2008 - 01:11
No big deal. Props to ZA for bringing out a program update in less than a day to fix a problem like this. Most companies aren't that fast, MS included.
#28 Debio on 12 Jul 2008 - 17:30
People tend to blame Microsoft for stuff like this, and others try to defend them. The fact is that something so basic as the OS networking code really shouldn't contain security vulnerabilities and these updates shouldn't exist.
As for Zonealarms, it's quite possible that they knew about the problem before the patch was released, but you forget that MOST companies (Microsoft seems to be excluded) test their patches and updates for compatibility problems BEFORE they are released, and that takes time. For all you know the Zonealarms update could have come out a few hours after the Microsoft update. What confuses people is that all outgoing connections are blocked by the glitch, including Zonealarm's attempts to get updates. Setting the security level to medium and telling Zonealarms to check for updates gets you an update that resolves the problem.
From a programming perspective, the Zonelabs programmers were right to assume that the XP core network libraries weren't going to change, and it's both good that Microsoft updated them to fix the security hole and bad that there was a security hole.

As for the people using Microsoft OneCare, I've seen it on a few friends' computers, and the largest impression I've gotten from it is that it's huge resource hog.
You say it works just fine, well, I use Zonealarms free (on my few Windows boxes, the rest are linu, and it fits the descriptions you've given me of Microsoft OneCare, it rarely bothers me about anything, but it gives a decent level of security.
After Microsoft's inability to write secure OS code, why do you think it can write a working security application? I will never trust OneCare.

Anyway, one question I'm going to get is "Why do you use Zonealarms free?"
I've used it since Windows 98, and I've had a NAT router and home network since Windows 98 as well. I prefer the low level control that IPTables on linux gives me, but other family members use the Windows boxes, and Zonealarms gives excellent outgoing protection with a fairly understandable UI for the less advanced user. It's more memory and CPU efficient than most other firewalls, and it does what it needs to do.

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)