Hi,

I have a Windows 7 machine on which I have installed Microsoft .NET 1.1 and 4.5.1.

I scan this machine for May 2014 patches using Shavlik Protect. Interestingly the scan shows missing patch for .NET 3.5.1 (Q2931356) which I have not installed on my machine at all.

Why Shavlik Protect is showing up this patch as missing eventhough my machine does not have .NET 3.5.1?

Any help would be appreciated.

Thank you

Srikanth Badireddy

Today I was getting the message "Connected to a machine with the wrong hostname or domain name."  Turns out the real error was remote registry service not running (it was set to manual).  This was 9.1.0 build 4334 scanning a fresh build of Windows 7 pro.

Hi.  I finally deployed the Shavlik Protect product to production and ran it for the first time last night. I tried to run this against 50 computers, and got 500+ updates.  I went ahead and deployed the downloads to the machines requiring the patches without installation. I verified about 10 machines at random to see if their propatches folder had data and it did. I then went into shavlik protect and ran the deployment and said install automagicaly. 

While watching the Shavlik Protect Deployment Tracker, I saw several patches complete, several say reboot required, and then tons show up as scheduled.  after over an hour, the shceduled number never dropped.  After verifying that the ones that were still scheduled werent in succesfully installed or reboot required category, I hopped in the Event Viewer logs of the machines that said they still had patches scheduled.. I was shocked to see that the patches were applied the first 15 minutes after i deployed them, but the deployment tracker didnt catch the update..

How do i get the deployment tracker to update properly? or what mechanism do i use to actually properly monitor the status of patching?  We are manually pushing patches until we prove that the system works without a hitch. 

Hello,

I have recently began experiencing issues with the Shavlik Console Service stopping unexpectedly which causes the scanning to freeze up. I have included both the errors that I receive each time this happens.

Any help will be greatly appreciated...thanks,

Paul

Log Name:      Application

Source:        Application Error

Date:          7/21/2014 3:40:27 PM

Event ID:      1000

Task Category: (100)

Level:         Error

Keywords:      Classic

User:          N/A

Computer:      test.windsorfamily.com

Description:

Faulting application name: ST.ServiceHost.exe, version: 9.1.1012.0, time stamp: 0x533eec9d

Faulting module name: ole32.dll, version: 6.1.7601.17514, time stamp: 0x4ce7c92c

Exception code: 0xc0000005

Fault offset: 0x000000000002f3d6

Faulting process id: 0x83c

Faulting application start time: 0x01cfa51a67ae5baf

Faulting application path: E:\Program Files\LANDESK\Shavlik Protect\ST.ServiceHost.exe

Faulting module path: C:\Windows\system32\ole32.dll

Report Id: dd5eca45-110e-11e4-9cf4-005056a96cdb

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

  <System>

    <Provider Name="Application Error" />

    <EventID Qualifiers="0">1000</EventID>

    <Level>2</Level>

    <Task>100</Task>

    <Keywords>0x80000000000000</Keywords>

    <TimeCreated SystemTime="2014-07-21T19:40:27.000000000Z" />

    <EventRecordID>112254</EventRecordID>

    <Channel>Application</Channel>

    <Computer>test.windsorfamily.com</Computer>

    <Security />

  </System>

  <EventData>

    <Data>ST.ServiceHost.exe</Data>

    <Data>9.1.1012.0</Data>

    <Data>533eec9d</Data>

    <Data>ole32.dll</Data>

    <Data>6.1.7601.17514</Data>

    <Data>4ce7c92c</Data>

    <Data>c0000005</Data>

    <Data>000000000002f3d6</Data>

    <Data>83c</Data>

    <Data>01cfa51a67ae5baf</Data>

    <Data>E:\Program Files\LANDESK\Shavlik Protect\ST.ServiceHost.exe</Data>

    <Data>C:\Windows\system32\ole32.dll</Data>

    <Data>dd5eca45-110e-11e4-9cf4-005056a96cdb</Data>

  </EventData>

</Event>

Log Name:      Application

Source:        .NET Runtime

Date:          7/21/2014 3:40:26 PM

Event ID:      1026

Task Category: None

Level:         Error

Keywords:      Classic

User:          N/A

Computer:      test.windsorfamily.com

Description:

Application: ST.ServiceHost.exe

Framework Version: v4.0.30319

Description: The process was terminated due to an unhandled exception.

Exception Info: System.AccessViolationException

Stack:

   at System.Management.IWbemServices.ExecMethod_(System.String, System.String, Int32, System.Management.IWbemContext, IntPtr, System.Management.IWbemClassObjectFreeThreaded ByRef, IntPtr)

   at System.Management.IWbemServices.ExecMethod_(System.String, System.String, Int32, System.Management.IWbemContext, IntPtr, System.Management.IWbemClassObjectFreeThreaded ByRef, IntPtr)

   at System.Management.SecuredIWbemServicesHandler.ExecMethod_(System.String, System.String, Int32, System.Management.IWbemContext, System.Management.IWbemClassObjectFreeThreaded, System.Management.IWbemClassObjectFreeThreaded ByRef, IntPtr)

   at System.Management.ManagementObject.InvokeMethod(System.String, System.Management.ManagementBaseObject, System.Management.InvokeMethodOptions)

   at System.Management.Automation.ManagementClassApdapter.InvokeManagementMethod(System.Management.ManagementObject, System.String, System.Management.ManagementBaseObject)

   at System.Management.Automation.BaseWMIAdapter.AuxillaryInvokeMethod(System.Management.ManagementObject, WMIMethodCacheEntry, System.Object[])

   at System.Management.Automation.Adapter.BaseMethodInvoke(System.Management.Automation.PSMethod, System.Management.Automation.PSMethodInvocationConstraints, System.Object[])

   at System.Dynamic.UpdateDelegates.UpdateAndExecute4[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089],[System.Int64, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089],[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089],[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089],[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]](System.Runtime.CompilerServices.CallSite, System.__Canon, Int64, System.__Canon, System.__Canon)

   at System.Management.Automation.Interpreter.DynamicInstruction`5[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089],[System.Int64, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089],[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089],[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089],[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].Run(System.Management.Automation.Interpreter.InterpretedFrame)

   at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(System.Management.Automation.Interpreter.InterpretedFrame)

   at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(System.Management.Automation.Interpreter.InterpretedFrame)

   at System.Management.Automation.Interpreter.Interpreter.Run(System.Management.Automation.Interpreter.InterpretedFrame)

   at System.Management.Automation.Interpreter.LightLambda.RunVoid1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]](System.__Canon)

   at System.Management.Automation.DlrScriptCommandProcessor.RunClause(System.Action`1<System.Management.Automation.Language.FunctionContext>, System.Object, System.Object)

   at System.Management.Automation.CommandProcessorBase.DoComplete()

   at System.Management.Automation.Internal.PipelineProcessor.DoCompleteCore(System.Management.Automation.CommandProcessorBase)

   at System.Management.Automation.Internal.PipelineProcessor.SynchronousExecuteEnumerate(System.Object, System.Collections.Hashtable, Boolean)

   at System.Management.Automation.PipelineOps.InvokePipeline(System.Object, Boolean, System.Management.Automation.CommandParameterInternal[][], System.Management.Automation.Language.CommandBaseAst[], System.Management.Automation.CommandRedirection[][], System.Management.Automation.Language.FunctionContext)

   at System.Management.Automation.Interpreter.ActionCallInstruction`6[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089],[System.Boolean, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089],[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089],[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089],[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089],[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].Run(System.Management.Automation.Interpreter.InterpretedFrame)

   at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(System.Management.Automation.Interpreter.InterpretedFrame)

   at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(System.Management.Automation.Interpreter.InterpretedFrame)

   at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(System.Management.Automation.Interpreter.InterpretedFrame)

   at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(System.Management.Automation.Interpreter.InterpretedFrame)

   at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(System.Management.Automation.Interpreter.InterpretedFrame)

   at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(System.Management.Automation.Interpreter.InterpretedFrame)

   at System.Management.Automation.Interpreter.Interpreter.Run(System.Management.Automation.Interpreter.InterpretedFrame)

   at System.Management.Automation.Interpreter.LightLambda.RunVoid1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]](System.__Canon)

   at System.Management.Automation.DlrScriptCommandProcessor.RunClause(System.Action`1<System.Management.Automation.Language.FunctionContext>, System.Object, System.Object)

   at System.Management.Automation.CommandProcessorBase.DoComplete()

   at System.Management.Automation.Internal.PipelineProcessor.DoCompleteCore

I'm working on an automated deployment process for both new physical and new virtual systems.  I'm trying to figure out how I can scan, patch, and validate successful patching against a new system.  Basically, the process would be part of a build script/workflow (written in-house) that is building the new system.  At some point, it would run a scan using a patch template we've already created, deploy service packs and patches as needed, validate those patches got installed, then rescan the machine to ensure no additional patches were needed.  Effectively, everything I do today with my keyboard and mouse, but eliminating me from the picture. :-)

I'm a very capable scripter/programmer, but I can't find any API documents, CLI tools, etc. that would help with this process.

Does anyone know of anything or a creative/outside-the-box method of accomplishing the same?

Hi.  I finally deployed the Shavlik Protect product to production and ran it for the first time last night. I tried to run this against 50 computers, and got 500+ updates.  I went ahead and deployed the downloads to the machines requiring the patches without installation. I verified about 10 machines at random to see if their propatches folder had data and it did. I then went into shavlik protect and ran the deployment and said install automagicaly. 

While watching the Shavlik Protect Deployment Tracker, I saw several patches complete, several say reboot required, and then tons show up as scheduled.  after over an hour, the shceduled number never dropped.  After verifying that the ones that were still scheduled werent in succesfully installed or reboot required category, I hopped in the Event Viewer logs of the machines that said they still had patches scheduled.. I was shocked to see that the patches were applied the first 15 minutes after i deployed them, but the deployment tracker didnt catch the update..

How do i get the deployment tracker to update properly? or what mechanism do i use to actually properly monitor the status of patching?  We are manually pushing patches until we prove that the system works without a hitch. 

HI,

I got deployment issues with the following MS Office 2010 & 2013 patches, Shavlik Protect detects all the following patches as missing but it did not deploy them.

1) KB2878284 - Shavlik Protect says installation failed when I try to deploy through Protect, but Windows says "There is no product affected by this package installed on this system" when I deploy manually.

2) KB2880463 - Protect failed to deploy, but Windows throws up message "There is no product affected by this package installed on this system" when I deploy manually.

3) KB2880991 - Protect failed to deploy, but Windows throws up message "There is no product affected by this package installed on this system" when I deploy manually.

4) KB2881005 - Protect failed to deploy, but Windows throws up message "The Update is already installed on the system" when I deploy manually.

5) KB2881014 - Protect failed to deploy, but Windows throws up message "The Update is already installed on the system" when I deploy manually.

Any help would be appreciated.

Thanks

Srikanth

Hi,

It is now possible to automate the patching of Hyper-v failover clusters in Server 2012 R2 with cluster aware updating (CAU).

Is it possible to use Shavlik with CAU, either as a source for patches or in the form of a plugin?

Thanks,

Hi,

KB2984930 remediates a bug introduced by MS14-039 (KB2973201). After having installated this bugfix, Shavlik Protect warns "File version is less than expected. [C:\ProgramFiles\Common Files\MICROSOFT SHARED\INK\TIPSKINS.DLL 6.1.7601.18532< 6.1.7601.22722]".

The file versions of TIPSKINS.DLL
-   before the bugfix was applied  6.1.7601.18512

-   after the bugfix was applied    6.1.7601.18532

In the article http://support.microsoft.com/kb/2984930/en-us Microsoft enlists both versions:

Tipskins.dll    6.1.7601.18532    1,247,232    14-Jul-2014    02:02    x64

Tipskins.dll    6.1.7601.22743    1,247,232    14-Jul-2014    01:52    x64

The "File information" section is introduced by an explanation about the differing versions:

The files that apply to a specific product, SR_Level (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:

So why shouldwe have a LDR version after having updated from a GDR version?

Thanks for considering this issue.

Klaus Uhr

Hi,

I am using Protect for the first time and I am completeing some scans- most servers come back ok, but some have errors including; 

Error : 200 Machine not found

Error : 201 Machine not found due to probable network error

Error : 235 System not found or Netbios ports may be firewalled

Error : 808 no disks specified to mount

So far I have been working through these errors-  Ensuring machine is on, testing with firewall off, making sure I can telnet to machine from Protect server etc etc

but still some machines still cannot be scanned- does someone have a cheet sheet or something to help me with the basic trouble shooting steps?

I am sure I am just over looking something...

Also when would I use the agent?

Any help would be appreciated.

Cheers,

Jamie

When both options, SQL and sanity check are selected, what is the exact order of operations?

Does SQL get stopped before the sanity check reboot and stay down for the duration of patching?

Does SQL bounce (start back up), and then go down for the patching?

My gut tells me it is the latter, not the former.

Hello Fellow Shavlik patchers.

I have just tested the latest patch from Apple iTunes update on one of my staff workstations.

- Added AI14-001(QAI1114): Itunes 11.1.4 for Windows

This is the result.

Please beware...

To resolve the issue.

Go to Control Panel> Add or Remove Programs (Win XP) or Programs and Features (later)

Remove all of these items in the following order:

• iTunes
• Apple Software Update
• Apple Mobile Device Support (if this won't uninstall press on)
• Bonjour
• Apple Application Support

Reboot, download iTunes, then reinstall, either using an account with administrative rights, or right-clicking the downloaded installer and selecting Run as Administrator.

See also HT1925: Removing and Reinstalling iTunes for Windows XP or HT1923: Removing and reinstalling iTunes for Windows Vista, Windows 7, or Windows 8. Some users may need to follow all the steps in the appropriate support document which includes some additional manual file and folder deletions not mentioned above.

Thanks,

Sirstox

Hello,

According to the Shavlik doc here:  http://www.shavlik.com/onlinehelp/Protect90HTMLHelp/HFN.htm#Configuring_Operations_Overview.htm it shows that the client should be listening on ports: 135, 445 and 5120. 

From the Shavlik server I got these results trying to telnet to the client;

Port 135               Successful

Port 445               Successful

Port 5120             Failed

According to the Shavlik doc, the server should be listening on ports: 445, 3121 and 3122.

From the client telnetting to the Shavlik server, I got these results;

Port 445               Successful

Port 3121             Successful

Port 3122             Failed

I did a “netstat –aon” for each server.  There is no port 5120 listening on the client and no port 3122 listening on the Shavlik server.

Can you tell me if these ports should be listening?  I am running Shavlik Protect 9 and Windows Server 2008.

I'm curious how vCenter protect will deal with this "hotfix rollup" to Windows 2008 and Windows 2008 R2.  Will this be selectable as a service pack or will it be a critical patch deployment?

http://support.microsoft.com/kb/2775511

Please advise.

Hi Support Team,

User asked "Does Shavlik access the packager executable on the target host via SMB/Windows file sharing"

They've asked this as they're seeing some unusual traffic that they need an explanation for -

Signature: "ETPRO EXPLOIT Possible Microsoft Windows Object Packager Packager.exe Insecure Library Loading Code Execution - SMB-DS Unicode”"
Source Systems: 192.168.182.28 (cscaucvwpsha01) and 192.168.182.29 (cscaucvwpsql01)
Targets: multiple GE hosts in multiple subnets

File accessed: C:\WINDOWS\SYSTEM32\PACKAGER.EXE

Please suggest, Thanks in Advance.

Does Shavlik look for Oracle Virtual Box security patches? Is it possible to push virtual box .exe with Shavlik?

This is our first attempt to patch a VMware template and after configuring the correct permissions and accounts it access the host and guests but I receive the following when doing a scan.

"Complete with errors, Check the hypervisor network configuration and firewall settings".

What is this error directing me to check or what could be the issue?