1 Reply Latest reply on Apr 3, 2012 3:32 PM by historicalshavlikemployee

    Why is Shavlik (v7.8) not detecting these MS patches? (Compared to MBSA, OS are 2008 and 2008R2 Standard and Enterprise): MS08-052(KB954326), MS09-062(KB971119,KB2251487), MS11-049(KB2251487),MS11-025(KB2538243,KB2565057), MS12-021(KB2669970).

    Master
      Why is Shavlik (v7.8) not detecting these MS patches? (Compared to MBSA, OS are 2008 and 2008R2 Standard and Enterprise): MS08-052(KB954326), MS09-062(KB971119,KB2251487), MS11-049(KB2251487),MS11-025(KB2538243,KB2565057), MS12-021(KB2669970).
        • 1. Re: Why is Shavlik (v7.8) not detecting these MS patches? (Compared to MBSA, OS are 2008 and 2008R2 Standard and Enterprise): MS08-052(KB954326), MS09-062(KB971119,KB2251487), MS11-049(KB2251487),MS11-025(KB2538243,KB2565057), MS12-021(KB2669970).
          Master
          All of the updates which you have referenced are supported by our data. When scanning a machine, Protect looks at the file and registry levels to determine both the currently installed products (including the operating system version details), and the current 'patch level' of those products.

          It may be that the template being used includes additional filtering, or that the machine in question does not actually require these updates (e.g. the vulnerable files do not exist on the machine).

          Please also keep in mind that supersedence may be a factor. In the case of MS08-052, this was superseded by MS09-062, which was later superseded by MS11-029. If MS11-029 was installed (without having actually installed MS08-052 and MS09-062), then MS08-052 and MS09-062 would be considered 'effectively installed'.

          Try the following:

          1) Create a new 'Patch Scan' template.

          2) Name the template, then navigate to the 'General' tab.

          3) Select 'Include effetively installed patches'.

          4) Leave all other settings at their defaults.

          5) Save the template, then use it to scan one of the machines in question.

          Review the results of the scan. If the updates in question are not listed as either 'Patch Installed', 'Effectively Installed', or 'Patch Missing', we would urge you to contact support directly for further assistance in generating and analyzing log data.