Solutions for Kb951748 and Zone Alarm Incompatibility Issue

New DNS Security Update from Microsoft Renders Computers Unable to Reach the Internet

Brad Sylvester
Computers around the world have been shut off from the internet by Microsoft's latest security update kb951748. Microsoft has issued kb951748 as an update to fix a DNS (Domain Name System) security flaw on computers running Windows XP, Windows Server 2003, and the client side of Windows 2000 Server. However, Microsoft security update kb951748 does not play nicely with the popular firewall security program Zone Alarm. Zone Alarm is a highly regarded internet security program designed to protect computers from unauthorized access, viruses, and other malware that may be encountered on the web. Zone Alarm has become popular in part because ZoneLabs, its creator, offers a basic version for free at zonealarm.com.

Makers of Zone Alarm say uninstall kb951748

ZoneLabs, the maker of Zone Alarm, recommends completely uninstalling Microsoft's kb951748 until the problem is corrected. Unfortunately, if you have this problem, you have no internet access to find out about this solution. Other users report that shifting their Zone Alarm firewall setting from High to Medium restores access to the internet. However, lowering the security setting on the Zone Alarm firewall increases the chances of your computer being subjected to a security breach.

Microsoft to gain Firewall Marketshare?

Windows does have its own built-in firewall and computers running the Windows firewall instead of the one from Zone Alarm, have not had similar issues with the kb951748 update. As a result, Microsoft may end up damaging an important internet security competitor through this inadvertent compatibility issue between the Windows DNS update and Zone Alarm's firewall program. If users remove the Zone Alarm firewall and start using the built-in windows firewall, then Microsoft stands to gain market share at Zone Alarm's expense.

While we like to believe that the incompatibility of Microsoft's DNS security update kb951748 with Zone Alarm is entirely unintended and accidental, it is certainly suspicious. Microsoft in recent years has been found guilty in American and European courts of numerous fair trade practice violations designed to increase Microsoft's marketshare by using its near-monopoly in PC operating systems to take marketshare from competitor's PC products such as web browsers and media players.

kb951748/ Zone Alarm incompatibility Solutions

If you have been affected by the kb951748 and Zone Alarm incompatibility issue, there are a few known ways to restore your computer's ability to reach the internet.

1) Follow the ZoneLabs recommendation to uninstall the kb951748 update. This leaves the previously existing DNS security flaw open and exploitable on your computer. Your risk is probably low since this is a recently discovered flaw.

2) Lower the security setting on your Zone Alarm firewall from the High setting to Medium. This increases your risk from internet-based attacks somewhat, but at least you can reach the internet. While at this setting, visit only reputable websites that have a lower risk of embedded malware.

3) Disable the Zone Alarm firewall and use the Windows firewall. This offers full firewall protection and can be set to the High security setting without affecting your ability to reach the internet.

Published by Brad Sylvester - Featured Contributor in Lifestyle

Brad spent 18 years in the consumer electronics industry, including more than ten years in new product development. He now writes full time from his home in the mountains of New Hampshire.   View profile

  • Microsoft encourages users to let their computers automatically seek and install windows updates.
  • Microsoft update kb951748 can prevent users of the Zone Alarm firewall from accessing the internet.
  • There are several options for restoring internet access if you have been affected.

13 Comments

Post a Comment
  • brokendoll 7/12/2008

    sorry but eventhough it was ticked, it did not show on the list. that is why i'm wondering...sorry for the people who think we're stupid..and MR. V, i'm sorry if you had a bad time with tech support.

  • heh2k 7/11/2008

    I'm NOT using zonealarm and KB951748 won't even install. I'm only using the windows firewall.

  • Brad Sylvester 7/11/2008

    ZoneLabs is now offering updated versions of all of their affected platforms which they say fixes the problem. I haven't tried any of these updates personally, but I trust ZoneLabs has a good handle on it. Here's the link for the downloads:

    http://download.zonealarm.com/bin/free/pressReleases/2008/LossOfInternetAccessIssue.html

  • Jeym 7/11/2008

    I deleted kb951748 and updated Zone Alarm and everything was back to normal. But after I came home from work the system was hosed again, no internet connection and it was running slow. I then uninstalled Zone Alarm and returned the system to a 6JUL08 restore point and switched on the windows firewall. Now it's all back to normal. But I don't have Zone Alarm firewall. Bummer. What is the latest fix from Zone Alarm?

  • John 7/10/2008

    It is, provided you tick the 'show updates' box

  • herb 7/10/2008

    It is listed..check the show update box on the Add/remove program list and it will show up..that is how I found it..

  • Mr.V 7/10/2008

    Just figured it out BTW - 1) Uninstall the update KB951748 - 2) Click the Yellow Shield by the clock - 3) Do a CUSTOM install - 4) UNCheck Secuirty Update for Windows XP (KB951748). This will keep your system working and going. Remember that you still are un-patched and need to make sure you get the working patch later on.

  • Mr.V 7/10/2008

    TIK: I just tried to update my ZA client and it didn't have any new updates to download to fix this glitch. I've uninstalled it but the problem is the automatic updates re-install it everynight at 3am. Microsoft needs to recall that forced required patch until they can make it work, unless they like making ZA's software ineffective. Gotta lova big corporations!

  • Mr.V 7/10/2008

    Lol - What does that say about Dell Technical Support. I really hope your only Level 1 clone that can only read those stupid "guided" help screens that make you ask the client retarded questions to have their software do the work, not you... LOL. This is why you always insist on being bumped to Level2 right away. Even though there's more of the same there too.

  • Krishna 7/10/2008

    Brokendoll : Dude being a Agent at Dell you should know that you would need to check the option that says "Show updates" :) ..now i guess u would realized...

Displaying Comments
Next »

To comment, please sign in to your Yahoo! account, or sign up for a new account.