Important Notice: On February 29th, this community was put into read-only mode. All existing posts will remain but customers are unable to add new posts or comment on existing. Please feel to join our Community Discord for any questions and discussions.

Microsoft OS Hot Fixes not showing in scan results

Jason Mauai

May 20, 2017 11:03

Logged on to the machine I see all the OS Hot Fixes listed:

But my PDQ scan results doesn't show any OS Hot Fixes:

So far only two machines out of 1600~ have this issue. We are trying to confirm our WannaCrypt patch compliance but can't when the scan results are not correct. Let me know what I'm doing wrong.

Comments

3 comments

Tonsfeldt, Travis
May 20, 2017 17:43

I had the same issue with 3 of my machines and i was able to figure it out with assistance from support to understand how they scan the systems.

https://blogs.technet.microsoft.com/askperf/2012/06/29/two-minute-drill-win32_quickfixengineering-no-instances-available/

https://blogs.technet.microsoft.com/joscon/2010/05/26/using-checksur-and-update-packages-to-fix-corruption/

You need to view the CheckSUR log located at %SYSTEMROOT%\Logs\CBS\CheckSUR.log and view the errors at the bottom of that log and take the KB Number and download the KB from http://www.catalog.update.microsoft.com/Home.aspx

After you download the KB, you have to create an folder under %SYSTEMROOT%\CheckSUR called packages and drop the KB that you downloaded into it until you have all the KB's listed from the CheckSUR.log then you need to rerun the CheckSur "https://www.microsoft.com/en-us/download/details.aspx?id=20858" and check the log file again and the error should be gone and rescan the target or try to do windows updates

3
Jason Mauai
May 22, 2017 17:21

Worked perfectly, thank you.

0
John Wambach
October 05, 2017 13:47

We just used this fix as well and it worked wonderfully. Thank you for posting it!

0