9 replies to this topic

[Roger Truss]

First, I love this tool! I have noticed that even though Windows Update site shows me fully patched (XP SP3) autopatcher says I'm not???????

Here is the cmdline: autopatcher.exe /LOG /neverselctinstalled /nolicense /recommended

Here is what autopatcher says I still need:
KB950582
KB890830
KB932716 v2
KB955417
KB951618 v2
KB954708
Windows Update 7
KB943729
KB951596

There were also quite a lot of outlook updates that were showing up as well until I removed them from the source location and scripts as we use Lotus Notes.

[Cristiano]

well, WU doesn't have all updates that autopatcher has, just that

[]s

[James]

Hi Roger,

I think there's a bit more to this issue than an AutoPatcher -v- WU mismatch, but as Patch Tuesday happened yesterday, it will take a couple of days to come back to this.

Meanwhile, please note that kb890830 (Microsoft Windows Malicious Software Removal Tool = MRT) will always show a mismatch unless (1) AutoPatcher's APUP and (2) AutoPatcher itself and (3) WU were all run within the same 30-day patch cycle.

This is caused by the way Microsoft registers MRT.

Also, could you please let us know the dates that you ran apup.exe and autopatcher.exe?

--

[Roger Truss]

Also, could you please let us know the dates that you ran apup.exe and autopatcher.exe?

I ran both as well as WU Friday, Monday, tuesday and Wednesday trying to figure this out.
Now that patch Tuesday has come and gone I will run all 3 again to see what comes.

[James]

Thanks for the reply.

Until AutoPatcher's scripts are updated with everyting from Patch Tuesday, matters will get worse before they get better.

You can have more info in the log file (if you need it) with: /log /report /verbose

--

[Roger Truss]

Even if that is true why do they keep showing up even after running those particular updates several times??

[Roger Truss]

James, on Sep 10 2008, 07:55 AM, said:

Thanks for the reply.

Until AutoPatcher's scripts are updated with everyting from Patch Tuesday, matters will get worse before they get better.

You can have more info in the log file (if you need it) with: /log /report /verbose

--

Thanks! I just edded that to the shortcut I use.

[James]

Your log file will now be rather bigger! If it reports anything that seems relevant, please post it.

Also:

Roger Truss, on Sep 10 2008, 03:14 PM, said:

... why do they keep showing up ...

At this moment in time I do not know (but I have some ideas). I need to wait a day or two, however, until both AutoPatcher and WU are synchronised again following Patch Tuesday.

Do you know, apart from AutoPatcher's list and apart from WU's list, if the updates are actually successfully installed? In other words have you checked one of the updated files against the new version number, as posted in Microsoft's Security Bulletin.

Also have you looked at the log files for the updates themselves? Perhaps you could post, maybe KB950582.log, or one of them. Can you make sure that the "show updates" option is selected and then let me know if they show up in Add/Remove Programs? (They will, of course, not show if the show updates option is not selected).

The Outlook problem, is, I think, a completely different problem caused by the way Microsoft identifies Office products and, also, depends on what you have installed. From what you have posted, I guess you may already know this.

--

[James]

I've just realised that kb950582 is perhaps not the best single update to pick from your list, even if it is the first item, because this is the (in)famous Security Update that isn't. On Vista and Windows 2008 Server this is a Security Update. On XP and Windows 2000 it isn't. In private correspondence between Microsoft and a German patch expert I understand Microsoft have more-or-less admitted this as a mistake. Nevermind, we have to live with it!

So you will not find file details for XP listed in the Security Bulletin. This is also known as the "disable AutoRun" fix and has been numbered kb953252, but you will not find file details there either!

If it is succesfully installed you should have:
[indent]shell32.dll version 6,0,2900,5622 on Windows XP SP3[/indent]
size will depend on whether you have the QFE or GDR version

--

[Roger Truss]

So then I have waited for the newest updates to get applied to apup. Downloaded and then ran it on a client and some items are still showing up as not installed. Like Resorting the start menu, removing windows messenger, KB951596 (OK it looks like this exe was not downloaded),windows update 7, journal viewer and quite a few more. Baffling.