What scan template did you use on this image? Was it custom? Did it contain patch groups?
I believe the first issue is a B file issue. Please review the information below.
The detection for MS11-028, .Net Framework 4 is based on the following:
Reg key- HKLMSoftwareUpdatesMicrosoft .Net Framework 4 Client ProfileKB2446708 Release type = Security Update
GDR Service Branch - clrjit.dll ver 4.0.3109.225 %windir%Microsoft.NETFrameworkv4.30319
LDR Service Branch - clrjit.dll ver 4.0.30319.431 %windir%Microsoft.NETFrameworkv4.30319
We do not have detection for KB2526954
I am unsure on the last patch MS11-022 as to why it may have not detected correctly. I will wait to see the answers from the questions above to delve further. The detection issue will need to be sorted out, however the patch itself has caused a few issues.
It was a custom template. It does non-security patches, security patches and security tools. Excludes Winamp and Outlook patch 2412171. If necessary, I can restore the old image and repeat the process, using WUScan for the final scan.
I don't know what you mean by a "B file issue."
We would need logs to be able to troubleshoot why MS11-028 was not showing up for you. we are investigating MS11-022 (Powerpoint Viewer).
Just to update, we are contacting Microsoft about the Powerpoint issue.
If the other items are still an issue for you, please get in touch with support.
KB2446708 .Net 4 is still not being seen on some machines. I think it's being missed when only the .Net 4 client profile is installed. (See footnote 1 at http://www.microsoft.com/technet/security/Bulletin/MS11-028.mspx) On a machine where you don't see the patch as needed, the registry key HKLMSOFTWAREMicrosoftNET Framework SetupNDPv4Client exists, but HKLMSOFTWAREMicrosoftNET Framework SetupNDPv4Full does not. A software distribution scan for .NET 4 of a machine with only the .Net 4 client gets a hit because the ...FullInstall key does not exist.
Working on adding detection for.net 4 clients installs only, and will fix MS11-028 to offer to client installs. MS11-022 will be fixed to detect ppvwintl.dll for PowerPoint 2007 installs, not just the viewer. Update will be in next XML release.
fixed in XML data version = 22.214.171.1246 Last modified on 5/31/2011