No Web access after installing Update KB944533

[A.BORD]

After successfully installed the security update for IE7 for Windows Vista
[KB944533], I receive the message that Internet Explorer cannot display the
requested Web page when I try to go on Internet.
Microsoft support Web page [http://support.microsoft.com/kb/944533/en-us]
refers this error message to the following article
[http://support.microsoft.com/kb/942818/en-us].
No solution found in this article to solve my problem...
I use Windows Vista with the included Windows Firewall. After removing the
update, I disactivated my Kaspersky Internet Security (its firewall is not
active) for a second update installation. No change, I still get the
message: Webpage cannot be displayed.

Would you have any suggestion to fix that problem?

Thks for your help,
André

[PA Bear [MS MVP]]

[By any chance, did you post about this problem in IE General newsgroup,
too?]

Are you 100% certain that the Kaspersky Firewall is disabled?
===================
Error message after you install a Windows Internet Explorer 7 update from
Windows Update or from Microsoft Update: "Webpage cannot be displayed":
http://support.microsoft.com/kb/942818
===================
1. Disable your anti-virus application, any real-time protection provided by
an anti-spyware application (except for Windows Defender; includes Spybot
Tea Timer, SpySweeper Guards, AVG AS guard.exe, etc.), disable any
third-party firewall AND enable the Windows Firewall.

NB: You're "working without a net" now: Don't to ANYTHING else online (e.g.,
browsing; reading email; chatting) except #4 below until your anti-virus
application has been re-enabled!

2. Uninstall "Security Update for Windows Internet Explorer 7 (KB944533)"
via Add/Remove Programs (make sure Show Updates box is checked at top right)
and reboot.

3. Re-do #1 above.

4. Open Windows Update and reinstall KB944533.

5. Reboot; Make sure everything in #1 above is enabled again.
=====================
If still no joy...

Start a free Windows Update support incident request:
https://support.microsoft.com/oas/default.aspx?gprid=6527

Support for Windows Update:
http://support.microsoft.com/gp/wusupport

For home users, no-charge support is available by calling 1-866-PCSAFETY in
the United States and in Canada or by contacting your local Microsoft
subsidiary. There is no-charge for support calls that are associated with
security updates. When you call, clearly state that your problem is related
to a Security Update and cite the update's KB number (e.g., KB123456).

!! => **If your problem relates to a Cumulative Security Update for IE, call
the above number and ask to be transferred to the Consumer IE7 queue (which
is 47830).** <= !!

For more information about how to contact your local Microsoft subsidiary
for security update support issues, visit the International Support Web
site: http://support.microsoft.com/common/international.aspx

For enterprise customers, support for security updates is available through
your usual support contacts.
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE, OE, Security, Shell/User)
AumHa VSOP & Admin; DTS-L.net

[A.BORD]

My Kaspersky Firewall is always disabled as I use the Windows Firewall. I
did not post this problem in [microsoft.public.internetexplorer.general] but
I just read a similar post in which you gave the same resolution steps. I
had followed exactly your suggested steps prior to writing my post in this
newsgroup, with no joy...

"PA Bear [MS MVP]" <PABe...@gmail.com> a écrit dans le message de groupe
de discussion : uT56eTEc...@TK2MSFTNGP03.phx.gbl...

[PA Bear [MS MVP]]

[Crossposted to IE General for greater exposure]

Andre, see the information in my previous reply regarding your free support
options for issues caused by installing critical security updates.

Both you and posters in several recent, related threads in IE General
newsgroup [1] are running Kaspersky Internet Security, but with the
Kaspersky Firewall disabled and the Windows Firewall enabled. I can't help
but think that the Kaspersky Firewall, although supposedly disabled, is
playing a role in this common problem. I'd see what Kaspersky Support has
to say about all this, if I were you.

[1]
http://groups.google.com/group/microsoft.public.internetexplorer.general/browse_frm/thread/8511f2478d8c2154/884011aaf16c9b16
http://groups.google.com/group/microsoft.public.windowsupdate/browse_frm/thread/e1ead300f9f71af0/41f918fefbb3f2c6

--
~Robear Dyer (PA Bear)

MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

[Robert Aldwinckle]

(cross-post added to Vista Networking)
"A.BORD" <A.B...@videotron.ca> wrote in message
news:9ED6C718-9C39-4A5B...@microsoft.com
...

> I disactivated my Kaspersky Internet Security (its firewall is not active) for a second update installation.

Try a different tack? Does the Kaspersky product have any diagnostics
built into it? If so, *enable* its firewall and find out what it thinks about
IE's requests...

Alternatively, was that firewall ever active? If so, perhaps its disable command
is not sufficient to undo its interference. Try _removing_ the whole product?
(Make sure that the Windows firewall is active before connecting to the Internet.)

Another approach--better diagnostics but still fairly simple--would be to install
Fiddler2 and see what it thinks is happening to IE's requests. In that case
you would see the requests from IE being received by Fiddler. If they weren't
being accepted further down the path it would be a case of whatever is blocking
them would in fact be blocking Fiddler, not IE.

BTW another tool I have seen recommended but which I have not yet tried
is HTTPWatch...

http://www.httpwatch.com/download/
<quote>
This setup program installs the latest version of HttpWatch Basic Edition.
It is fully functional but only displays extended HTTP information
for a limited number of well known sites.
</quote>

I guess if you can't connect anywhere testing one its "well known sites"
might help. Otherwise be prepared to pay big bucks for its full features. ; )

The most transparent way of getting some useful diagnostics for this
that I know of is to capture with netcap (e.g. from XP Pro's Support Tools)
and then formatting its .cap files with Ethereal.

Note: I don't use Vista and don't know if any of these tools work on it
or if compatible equivalents exist.

Good luck

Robert Aldwinckle
---

Full opening post for new readers:

[jimmy3d]

i too am having this same problem...am running vista home prem with
Kapersky Int. Suite installed but with it's firewall disabled. the
problem is only with IE7 as Firefox and email works fine. Am a little
hesitant to uninstall Kapersky as its a little dicey getting keys re-
recognized sometimes.

[PA Bear [MS MVP]]

I don't get it: Why are all of you* running Kaspersky Internet Security and
disabling (or at least attempting to disable) the Kaspersky Firewall in
favor of Windows Firewall? Why purchase, let alone install, a "security
suite" if you're not going to use its firewall?

Surely it's not a coincidence that all of you who are using Kaspersky
Internet Security in such a manner are having problems with IE after
installing KB944533 this week.

* cf.
http://groups.google.com/group/microsoft.public.windowsupdate/browse_frm/thread/e1ead300f9f71af0/f6ba479fedc49718
and
http://groups.google.com/group/microsoft.public.internetexplorer.general/browse_frm/thread/8511f2478d8c2154/f49a7b549025897b

--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

[Leonard Grey]

I should know better than to stick my nose in here, but FWIW I have KIS
7 and have experienced no trouble with IE 7 or internet connectivity
after February's updates. I use all of KIS's modules except for the
Parental Control, which I don't need. Yet.
---
Leonard Grey
Errare humanum est

[Robert Aldwinckle]

"jimmy3d" <jimin...@comcast.net> wrote in message
news:36160400-4894-4094...@34g2000hsz.googlegroups.com...

>
>
> i too am having this same problem...am running vista home prem with
> Kapersky Int. Suite installed but with it's firewall disabled.

But was it ever enabled? And, to reask another of my questions,
does it have any diagnostics in it which would clarify what is happening
when it is enabled? If so, (to repeat) enabling it could prove helpful... ; o

Also, this suggests that perhaps Kaspersky was running when the install
was done (or after the boot needed to install the updated in-use modules)?
If that was the case and if that product did _anything_ to disrupt the install
you would have another explanation for your symptom. E.g. that could
prevent IE from working properly by breaking its configuration in the registry.
Diagnosing that without any knowledge of IE's internals would probably be
practically impossible. The best you could do then I suspect would be using
ProcMon to trace file and registry accesses for both good and bad cases
and then try comparing the two logs.

> the problem is only with IE7 as Firefox and email works fine.

Which proves you do have adequate connectivity but doesn't clarify
whether iexplore.exe is being blocked (assuming now that the install
was not corrupted in any manner by your security package.)

> Am a little
> hesitant to uninstall Kapersky as its a little dicey getting keys re-
> recognized sometimes.

So then try the other diagnostics I suggested. ; }

Another approach which may help if a blockage is active in nature
would be booting in safe mode with networking. E.g. then if the blockage
was being caused by misconfigured service, that program might be less likely
to be running.

If the blockage is being caused in some other manner, e.g. some kind of
deliberate modification to the new iexplore.exe module by your security apps
which prevents it from running properly--unless there is some builtin monitoring
which shows the reason for the failure of attempts to use the program over the
network, I don't know how you will be able to detect what is causing it.
This possibility would just be a hopefully more discoverable instance of the
"broken configuration" hypothesis. Again, running ProcMon and comparing
good and bad traces would be what I would try to provide sufficient clues.

Good luck

Robert
---

[Robert Aldwinckle]

"Leonard Grey" <Leo...@Grey.invalid> wrote in message
news:uk7bWDP...@TK2MSFTNGP02.phx.gbl...

>I should know better than to stick my nose in here, but FWIW I have KIS
> 7 and have experienced no trouble with IE 7 or internet connectivity
> after February's updates. I use all of KIS's modules except for the
> Parental Control, which I don't need. Yet.

Leonard,

Can you answer my question about diagnostics in Kaspersky?

Also, do you allow it to run when you do the install step?

Finally, is your OS Vista too? <eg>

Robert
---

[Leonard Grey]

I'm sorry but I wasn't paying attention and so didn't read your question
about diagnostics in Kaspersky.

When I install software, including updates from Microsoft, I "Pause
Protection" in KIS. This disables all components, including the
firewall. While KIS is 'paused' I rely on my NAT router to act as an
(incoming) firewall.

Obviously, I wouldn't do this unless I was confident about what I was
installing and that my system was clean to begin with. If I didn't have
the router I would disable File AntiVirus and Proactive Defense. Even
with the router, if I feel an installation is going to take more than a
few minutes I disconnect my computer from my cable modem - it's a
reminder in case I forget to re-enable KIS. My modem maintains its
connection to the internet even if its connection to my computer is
turned off.

And my OS is XP. Does that...<avoids eye contact>...matter?

---
Leonard Grey
Errare humanum est

[Rigdon@discussions.microsoft.com K. Rigdon]

"A.BORD" wrote:

> My Kaspersky Firewall is always disabled as I use the Windows Firewall. I
> did not post this problem in [microsoft.public.internetexplorer.general] but
> I just read a similar post in which you gave the same resolution steps. I
> had followed exactly your suggested steps prior to writing my post in this
> newsgroup, with no joy...
>

> "PA Bear [MS MVP]" <PABe...@gmail.com> a crit dans le message de groupe

[K. Rigdon]

"A.BORD" wrote:

> My Kaspersky Firewall is always disabled as I use the Windows Firewall. I
> did not post this problem in [microsoft.public.internetexplorer.general] but
> I just read a similar post in which you gave the same resolution steps. I
> had followed exactly your suggested steps prior to writing my post in this
> newsgroup, with no joy...
>

> "PA Bear [MS MVP]" <PABe...@gmail.com> a crit dans le message de groupe

[PA Bear [MS MVP]]

Yes, but note that these folks are disabling the Kaspersky Firewall (or
think they're disabling it) and using the Windows Firewall instead, Leonard.
--
~PA Bear

[PA Bear [MS MVP]]

[Ooo, I didn't think of the possibility that they may have upgraded to Vista
with KIS installed, Robert. Nice catch!]

[Kiloran]

I had exactly the same problem and decided that Kaspersky was the problem.
I uninstalled the programme, reinstalled KB944533 and was once again able to
access webpages.

"PA Bear [MS MVP]" wrote:

[jimmy3d]

PA Bear... you are correct ..the problem was running KIS with the
windows firewall....once i re-enabled the Kapersky firewall and
reinstalled the update, all is fine again. thanks for your help

[PA Bear [MS-MVP]]

Kiloran's original thread:
http://groups.google.com/group/microsoft.public.windowsupdate/browse_frm/thread/e1ead300f9f71af0/0d77ad458521781d
--
~PA Bear

[PA Bear [MS MVP]]

[X-post to IE General]

YW and thanks very much for your feedback!

--
~Robear Dyer (PA Bear)

MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

<paste>

Kiloran wrote:
> I had exactly the same problem and decided that Kaspersky was the problem.
> I uninstalled the programme, reinstalled KB944533 and was once again able
> to
> access webpages.

<snip>

jimmy3d wrote:
> i too am having this same problem...am running vista home prem with

> Kapersky Int. Suite installed but with it's firewall disabled. the
> problem is only with IE7 as Firefox and email works fine. Am a little

[A.BORD]

For your info PA Bear, I have disabled recently the Kaspersky Firewall by
unchecking it in the Kaspersky configuration and I enabled the Windows
Firewall when I thought Kaspersky was interfering in the installation and
operation of a Microsoft game (Flight Simulator X). I could install and use
that MS game that way, so I assumed the Kaspersky Firewall was the culprit
and kept it disabled giving the preference to the Windows Firewall, but now
I am not so sure of this assumption...

For my KB944533 previous installation attempts, I "paused the protection" of
Kaspersky through the rightclicking of its icon near the clock , assuming
the entire Kaspersky suite would be disabled. I don't know what this «pause
protection» does exactly, but I noticed today in the Kaspersky configuration
that only the header «protection» is shown as being disabled, and ALL the
remaining functions (File Antivirus, Proactive Defense, etc.) are ticked as
being active!

After reading other comments about my problem, I got confused about "who is
interfering what", so I decided to install KB944533 in this manner:
1- Disconnect my computer from my cable modem.
2- Disactivate individually all functions of Kaspersky in its configuration
panel (not by rightclicking its icon and selecting "pause protection").
3- Disable the Windows Firewall (just in case!...)
4- Install KB944533 with Windows Update.
5- Restart my computer.
6- Reactivate Kaspersky Internet Security, including its Firewall (I will
keep it enabled with the Windows Firewall disabled for later tests of
Microsoft Flt Sim X game).
7- Reconnect my computer to my cable modem.

Results: Successful installation with normal access to the Web. I am
HAPPY!

*** One thing I don't understand: How could I use Windows Update to install
that KB944533 while my computer was disconnected from my cable modem?... I
thought an Internet connexion was required to do this.

André

"PA Bear [MS MVP]" <PABe...@gmail.com> a écrit dans le message de groupe
de discussion : uX8z44Oc...@TK2MSFTNGP05.phx.gbl...

[PA Bear [MS MVP]]

Thanks very much for your feedback, André.

> ...How could I use Windows Update to install

> that KB944533 while my computer was disconnected from my cable modem?...
> I
> thought an Internet connexion was required to do this.

Windows Update in Vista (and Automatic Updates in other Windows versions)
downloads all updates to a temporary folder prior to installation, no matter
which of the first 3 settings in the following illustration are chosen:
http://www.microsoft.com/library/media/1033/windows/images/products/windowsvista/features/details/screenshot_installupdates.jpg

Since this temporary folder still contained the installation package for
MS08-010/KB944533, you were able to reinstall it offline.

I should think that the Kaspersky firewall wouldn't interfere with Flight
Simulator if you tweak its settings properly.

Given other related threads here, I would not recommend attempting to
disable the firewall in Kaspersky Internet Security in favor of using the
Windows Firewall unless you can figure out how to completely disable the
former. If you manage to do it, please let us know how.

--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

[PA Bear [MS MVP]]

PS: The Release Notes for IE7 (admittedly a little dated) include the
following caveat:

<QP>
If Flight Simulator 2004 stops responding after you have installed Internet
Explorer 7, find the oleacc.dll file in the Flight Simulator folder and
rename it to oleacc.old. Then restart Flight Simulator.
</QP>
Source: http://msdn2.microsoft.com/en-us/ie/Aa740486.aspx

Don't know what version of FlightSim you're running but thought I'd post the
above anyway.
--
~PA Bear

PA Bear [MS MVP] wrote:

> Thanks very much for your feedback, André.
>
>> ...How could I use Windows Update to install
>> that KB944533 while my computer was disconnected from my cable modem?...
>> I
>> thought an Internet connexion was required to do this.
>
> Windows Update in Vista (and Automatic Updates in other Windows versions)
> downloads all updates to a temporary folder prior to installation, no
> matter
> which of the first 3 settings in the following illustration are chosen:
> http://www.microsoft.com/library/media/1033/windows/images/products/windowsvista/features/details/screenshot_installupdates.jpg
>
> Since this temporary folder still contained the installation package for
> MS08-010/KB944533, you were able to reinstall it offline.
>
> I should think that the Kaspersky firewall wouldn't interfere with Flight
> Simulator if you tweak its settings properly.
>
> Given other related threads here, I would not recommend attempting to
> disable the firewall in Kaspersky Internet Security in favor of using the
> Windows Firewall unless you can figure out how to completely disable the
> former. If you manage to do it, please let us know how.
>

[Robert Aldwinckle]

"Leonard Grey" <Leo...@Grey.invalid> wrote in message

news:OLbr3OS...@TK2MSFTNGP06.phx.gbl...

> I'm sorry but I wasn't paying attention and so didn't read your question
> about diagnostics in Kaspersky.
>
> When I install software, including updates from Microsoft, I "Pause
> Protection" in KIS. This disables all components, including the
> firewall. While KIS is 'paused' I rely on my NAT router to act as an
> (incoming) firewall.

That could be a good tip. Is there anything else that users could be doing
when they say that they have disabled their Kaspersky firewall?
More particularly, I wonder what other components they might not be disabling
which could be the ultimate cause of the interference, e.g. during the install,
which would make the state of the Kaspersky firewall component irrelevant?

>
> Obviously, I wouldn't do this unless I was confident about what I was
> installing and that my system was clean to begin with. If I didn't have
> the router I would disable File AntiVirus and Proactive Defense. Even
> with the router, if I feel an installation is going to take more than a
> few minutes I disconnect my computer from my cable modem - it's a
> reminder in case I forget to re-enable KIS. My modem maintains its
> connection to the internet even if its connection to my computer is
> turned off.

All good practice.

>
> And my OS is XP. Does that...<avoids eye contact>...matter?

Who knows? ; ) The posters in this thread seem to be using Vista
so your result might at least be an example of "YMMV". <eg>

Robert
---

[Leonard Grey]

When someone says they "disabled their Kaspersky firewall", who knows
what that means? Does it mean they disabled the entire program ('pause
protection') or does it mean they opened the program and disabled just
the firewall component?

In any case, in the 13 months that I have been using KIS, I have yet to
have it prevent me from using the internet in any way.

Of course, as with any firewall, if someone doesn't understand how it
works and/or how to use it, they can easily hoist their own petard. For
example, one situation you commonly see in these newsgroups is where an
update to a web browser causes the firewall to react - the firewall sees
the browser has been modified - and the user denies the updated browser
internet access.

Also, KIS and KAV have an excellent user forum where very experienced
and knowledgeable users help each other out.

[Torkill Bruland]

Someone wrote

>> > >> Am a little
>> > >> hesitant to uninstall Kapersky as its a little dicey getting keys
>> > >> re-
>> > >> recognized sometimes.

I have exactly the same Denial of Service problems with IE7
after that update, and on a new Vista PC. And since Kaspersky
has never been installed on that PC, it seems to me that Kaspersky
is not the problem, or at least not the only problem.

--
Cheers
Torkill

[Leonard Grey]

A "denial of service" attack is when a server is hit by a massive amount
of bogus external requests to the point where it cannot respond to
legitimate traffic. If you're running a server, you're in the wrong
newsgroup(s).

---
Leonard Grey
Errare humanum est