5 Replies Latest reply on May 2, 2014 8:32 AM by Jim Wilson

    Windows PAJ does not show missing Patches

    Girish Tapare

      Hi,

       

      I have created patch analysis job for windows 2003 & executed against target server but I don’t find any missing patches on target (eg. MS14-019 which contains KB2922229 number). I browse for hotfix section to verify patch status but I don’t see any patch is installed with that Q2922229 number.

       

      Then I executed following command to check manually to check missing patches,

      nexec -e BLPatchCheck2.exe 0 -s hf7b.xml results.xml

       

      result.xml show MS14-019/Q2922229 is Missing but Patch Analysis job shows 0 missing patches.


      I have attached Trace.txt log which was generated by PAJ & Trace_manual.txt log file which was generated while checking missing patches manually with BLPatchCheck2 command.

      BSA Version : 8.2 SP4

       

      Thanks in advance.

        • 1. Re: Windows PAJ does not show missing Patches
          Jim Wilson

          The trace.txt has multiple executions logged.  The first one shows MS14-019/KB2922229 installed.


          2014-05-01T06:46:16.9693164Z 1eb0 V PatchTest.cpp:528 Testing 'MS14-019'.

          2014-05-01T06:46:16.9693164Z 1eb0 V PatchTest.cpp:633 Bulletin 'MS14-019', filecount = 1, regcount = 1.

          2014-05-01T06:46:16.9693164Z 1eb0 V PatchTest.cpp:1223 File '\\127.0.0.1\C$\WINDOWS\SYSTEM32\KERNEL32.DLL' error: 0.

          2014-05-01T06:46:16.9693164Z 1eb0 V PatchTest.cpp:1226 File \\127.0.0.1\C$\WINDOWS\SYSTEM32\KERNEL32.DLL (5.2.3790.5295)  C 2 5.2.3790.5295 (AC 5).

          2014-05-01T06:46:16.9693164Z 1eb0 V PatchTest.cpp:659 A file was tested.

          2014-05-01T06:46:16.9693164Z 1eb0 V PatchTest.cpp:1418 Key 'SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB2922229'.

          2014-05-01T06:46:16.9693164Z 1eb0 V PatchTest.cpp:1576 Reg passed.

           

          What happened to that server between 2014-05-01 06:46 and 2014-05-01 06:55:56?  According to the next execution, the version of KERNEL32.DLL has gone backwards?


          2014-05-01T06:55:56.1638917Z 1578 V PatchTest.cpp:528 Testing 'MS14-019'.

          2014-05-01T06:55:56.1638917Z 1578 V PatchTest.cpp:633 Bulletin 'MS14-019', filecount = 1, regcount = 1.

          2014-05-01T06:55:56.1638917Z 1578 V PatchTest.cpp:1223 File '\\127.0.0.1\C$\WINDOWS\SYSTEM32\KERNEL32.DLL' error: 0.

          2014-05-01T06:55:56.1638917Z 1578 V PatchTest.cpp:1226 File \\127.0.0.1\C$\WINDOWS\SYSTEM32\KERNEL32.DLL (5.2.3790.5069)  C 2 5.2.3790.5295 (AC 5).

          2014-05-01T06:55:56.1638917Z 1578 V PatchTest.cpp:659 A file was tested.

          2014-05-01T06:55:56.1638917Z 1578 V PatchTest.cpp:663 Did not pass file tests.

           

          Can you check the registry for Key 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB2922229'


          What do you see if you Browse the serve via the BSA Console and access the Hotfixes?  Is MS14-019 present?  What is it's status?


          • 2. Re: Windows PAJ does not show missing Patches
            Girish Tapare

            Hi Jim,

             

            The time you see"2014-05-01 06:46" was from Trace.txt which was generated by PAJ & second time which you have mentioned "2014-05-01 06:55:56" was from the other log which was generated by executing BLPatchCheck2 command. I don't understand why it shows different output.

            I have checked HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix & I there is not folder with name KB2922229 & also I don't see that patch is installed when I browse Hotfixes section.

            Thanks.

            • 3. Re: Re: Windows PAJ does not show missing Patches
              Jim Wilson

              Please run the manual command again, with the -pt 13 argument, and share the results

               

              nexec -e BLPatchCheck2.exe 0 -pt 13 -s hf7b.xml results.xml




              • 4. Re: Re: Re: Windows PAJ does not show missing Patches
                Girish Tapare

                Hi Jim,

                 

                PFA latest result.xml.

                Thanks

                • 5. Re: Re: Re: Windows PAJ does not show missing Patches
                  Jim Wilson

                  And the trace.txt file please.

                  By the looks of it, the MS14-019 bulletin should show as missing in the result of the PAJ.

                   

                  But I am still concerned about what happened to the version of KERNEL32.DLL between those first two executions

                   

                  It really looks like something happened on the target server in between the two runs.

                   

                  You should open a support issue to get this looked into in more detail.