Microsoft OS Hot Fixes not showing in scan results

Follow

Jason Mauai

• May 20, 2017 11:03

Logged on to the machine I see all the OS Hot Fixes listed:

But my PDQ scan results doesn't show any OS Hot Fixes:

So far only two machines out of 1600~ have this issue. We are trying to confirm our WannaCrypt patch compliance but can't when the scan results are not correct. Let me know what I'm doing wrong.

0

• 

  Trav A. Tonsfeldt

  • May 20, 2017 17:43

  I had the same issue with 3 of my machines and i was able to figure it out with assistance from support to understand how they scan the systems.

   

  https://blogs.technet.microsoft.com/askperf/2012/06/29/two-minute-drill-win32_quickfixengineering-no-instances-available/

  https://blogs.technet.microsoft.com/joscon/2010/05/26/using-checksur-and-update-packages-to-fix-corruption/

  You need to view the CheckSUR log located at %SYSTEMROOT%\Logs\CBS\CheckSUR.log and view the errors at the bottom of that log and take the KB Number and download the KB from http://www.catalog.update.microsoft.com/Home.aspx

  After you download the KB, you have to create an folder under %SYSTEMROOT%\CheckSUR called packages and drop the KB that you downloaded into it until you have all the KB's listed from the CheckSUR.log then you need to rerun the CheckSur "https://www.microsoft.com/en-us/download/details.aspx?id=20858" and check the log file again and the error should be gone and rescan the target or try to do windows updates

  3

  Comment actions Permalink
• 

  Jason Mauai

  • May 22, 2017 17:21

  Worked perfectly, thank you.

  0

  Comment actions Permalink
• 

  John Wambach

  • October 05, 2017 13:47

  We just used this fix as well and it worked wonderfully.  Thank you for posting it!

  0

  Comment actions Permalink

Please sign in to leave a comment.