3 Replies Latest reply on Jun 30, 2016 8:52 AM by cwinning

    False positive for June 2016 update rollup

    rbabcock Apprentice

      Server 2012 R2 Standard (the machine running Shavlik Protect), definition version 2.0.1.9508

       

      After applying the June 2016 update rollup, subsequent scans say it is still needed because

      c:\windows\system32\winsetupui.dll version 6.1.7601.23435 < 6.3.9600.17930

      If I try to reapply the rollup manually, it says it is already installed.

      Windows Update says nothing is needed.

      Using the WUScan template, this is the only patch reported as needed.

      Protect is correctly seeing the installed version number and the expected version matches the Microsoft article.

       

      It may be significant that this server was upgraded from 2008 R2 Enterprise.  Three other 2012 R2 servers that were built from scratch don't even have the file in question and have no trouble with the rollup.

       

      I'm tempted to just rename the dll and see if anything breaks, but it is owned by trusted installer which always makes such tricks difficult.