(imported topic written by SLB)
Is anyone seeing false positive on the above mentioned fixlets, MS12-035 for .NET 1.1?
We have started getting reports of the patch being missing and upon inspection, it would appear to be related to the MS12-074 and MS13-004 being installed before MS12-035 and the fixlet is not taking into account newer file versions. MS12-074 and MS13-004 update the same files as MS12-035 but to a later version. This seems to prevent MS12-035 from being installed therefore prevents the registry key that the fixlet is looking for from being created which makes the fixlet relevant. All files on the systems are newer that those contain in MS12-035 so I believe this is a false positive.
Q: (((name of it = “WinXP-2003”) AND service pack major version of it = 2) OR ((name of it = “WinVista” AND product type of it = nt workstation product type) AND service pack major version of it = 2) OR (((name of it = “WinVista” AND product type of it != nt workstation product type) OR (name of it = “Win2008”)) AND service pack major version of it = 2) OR ((name of it = “Win2003”) AND service pack major version of it = 2)) of operating system
A: True
Q: exists key “HKLM\Software\Microsoft\NET Framework Setup\NDP” whose (exists keys whose (name of it starts with “v1.1” AND value “SP” of it = 1) of it) of registry
A: True
Q: ((exists keys whose( (name of it = “DDE7F2BCF1D91C3409CFF425AE1E271A”) AND (exists key whose (name of it as string equals “InstallProperties” AND value “DisplayVersion” of it as string as version = “1.1.4322” AND value “Language” of it as integer = 1033 ) of it) AND (not exists key whose (name of it as string equals “FA6C3120265590D488C4A2CDCFC8F253”) of key “Patches” of it))of it ) OR (exists keys whose( (name of it = “DDE7F2BCF1D91C3409CFF425AE1E271A”) AND (exists key whose (name of it as string equals “InstallProperties” AND value “DisplayVersion” of it as string as version = “1.1.4322” AND value “Language” of it as integer = 1053 ) of it) AND (not exists key whose (name of it as string equals “FA6C3120265590D488C4A2CDCFC8F253”) of key “Patches” of it))of it ) OR (exists keys whose( (name of it = “DDE7F2BCF1D91C3409CFF425AE1E271A”) AND (exists key whose (name of it as string equals “InstallProperties” AND value “DisplayVersion” of it as string as version = “1.1.4322” AND value “Language” of it as integer = 1043 ) of it) AND (not exists key whose (name of it as string equals “FA6C3120265590D488C4A2CDCFC8F253”) of key “Patches” of it))of it ) OR (exists keys whose( (name of it = “DDE7F2BCF1D91C3409CFF425AE1E271A”) AND (exists key whose (name of it as string equals “InstallProperties” AND value “DisplayVersion” of it as string as version = “1.1.4322” AND value “Language” of it as integer = 1046 ) of it) AND (not exists key whose (name of it as string equals “FA6C3120265590D488C4A2CDCFC8F253”) of key “Patches” of it))of it ) OR (exists keys whose( (name of it = “DDE7F2BCF1D91C3409CFF425AE1E271A”) AND (exists key whose (name of it as string equals “InstallProperties” AND value “DisplayVersion” of it as string as version = “1.1.4322” AND value “Language” of it as integer = 1049 ) of it) AND (not exists key whose (name of it as string equals “FA6C3120265590D488C4A2CDCFC8F253”) of key “Patches” of it))of it ) OR (exists keys whose( (name of it = “DDE7F2BCF1D91C3409CFF425AE1E271A”) AND (exists key whose (name of it as string equals “InstallProperties” AND value “DisplayVersion” of it as string as version = “1.1.4322” AND value “Language” of it as integer = 1029 ) of it) AND (not exists key whose (name of it as string equals “FA6C3120265590D488C4A2CDCFC8F253”) of key “Patches” of it))of it ) OR (exists keys whose( (name of it = “DDE7F2BCF1D91C3409CFF425AE1E271A”) AND (exists key whose (name of it as string equals “InstallProperties” AND value “DisplayVersion” of it as string as version = “1.1.4322” AND value “Language” of it as integer = 1045 ) of it) AND (not exists key whose (name of it as string equals “FA6C3120265590D488C4A2CDCFC8F253”) of key “Patches” of it))of it ) OR (exists keys whose( (name of it = “DDE7F2BCF1D91C3409CFF425AE1E271A”) AND (exists key whose (name of it as string equals “InstallProperties” AND value “DisplayVersion” of it as string as version = “1.1.4322” AND value “Language” of it as integer = 1038 ) of it) AND (not exists key whose (name of it as string equals “FA6C3120265590D488C4A2CDCFC8F253”) of key “Patches” of it))of it ) OR (exists keys whose( (name of it = “DDE7F2BCF1D91C3409CFF425AE1E271A”) AND (exists key whose (name of it as string equals “InstallProperties” AND value “DisplayVersion” of it as string as version = “1.1.4322” AND value “Language” of it as integer = 2070 ) of it) AND (not exists key whose (name of it as string equals “FA6C3120265590D488C4A2CDCFC8F253”) of key “Patches” of it))of it ) OR (exists keys whose( (name of it = “DDE7F2BCF1D91C3409CFF425AE1E271A”) AND (exists key whose (name of it as string equals “InstallProperties” AND value “DisplayVersion” of it as string as version = “1.1.4322” AND value “Language” of it as integer = 1055 ) of it) AND (not exists key whose (name of it as string equals “FA6C3120265590D488C4A2CDCFC8F253”) of key “Patches” of it))of it ) OR (exists keys whose( (name of it = “DDE7F2BCF1D91C3409CFF425AE1E271A”) AND (exists key whose (name of it as string equals “InstallProperties” AND value “DisplayVersion” of it as string as version = “1.1.4322” AND value “Language” of it as integer = 1044 ) of it) AND (not exists key whose (name of it as string equals “FA6C3120265590D488C4A2CDCFC8F253”) of key “Patches” of it))of it ) OR (exists keys whose( (name of it = “DDE7F2BCF1D91C3409CFF425AE1E271A”) AND (exists key whose (name of it as string equals “InstallProperties” AND value “DisplayVersion” of it as string as version = “1.1.4322” AND value “Language” of it as integer = 1041 ) of it) AND (not exists key whose (name of it as string equals “FA6C3120265590D488C4A2CDCFC8F253”) of key “Patches” of it))of it ) OR (exists keys whose( (name of it = “DDE7F2BCF1D91C3409CFF425AE1E271A”) AND (exists key whose (name of it as string equals “InstallProperties” AND value “DisplayVersion” of it as string as version = “1.1.4322” AND value “Language” of it as integer = 1030 ) of it) AND (not exists key whose (name of it as string equals “FA6C3120265590D488C4A2CDCFC8F253”) of key “Patches” of it))of it ) OR (exists keys whose( (name of it = “DDE7F2BCF1D91C3409CFF425AE1E271A”) AND (exists key whose (name of it as string equals “InstallProperties” AND value “DisplayVersion” of it as string as version = “1.1.4322” AND value “Language” of it as integer = 1035 ) of it) AND (not exists key whose (name of it as string equals “FA6C3120265590D488C4A2CDCFC8F253”) of key “Patches” of it))of it ) OR (exists keys whose( (name of it = “DDE7F2BCF1D91C3409CFF425AE1E271A”) AND (exists key whose (name of it as string equals “InstallProperties” AND value “DisplayVersion” of it as string as version = “1.1.4322” AND value “Language” of it as integer = 1032 ) of it) AND (not exists key whose (name of it as string equals “FA6C3120265590D488C4A2CDCFC8F253”) of key “Patches” of it))of it ) OR (exists keys whose( (name of it = “DDE7F2BCF1D91C3409CFF425AE1E271A”) AND (exists key whose (name of it as string equals “InstallProperties” AND value “DisplayVersion” of it as string as version = “1.1.4322” AND value “Language” of it as integer = 1031 ) of it) AND (not exists key whose (name of it as string equals “FA6C3120265590D488C4A2CDCFC8F253”) of key “Patches” of it))of it ) OR (exists keys whose( (name of it = “DDE7F2BCF1D91C3409CFF425AE1E271A”) AND (exists key whose (name of it as string equals “InstallProperties” AND value “DisplayVersion” of it as string as version = “1.1.4322” AND value “Language” of it as integer = 1042 ) of it) AND (not exists key whose (name of it as string equals “FA6C3120265590D488C4A2CDCFC8F253”) of key “Patches” of it))of it ) OR (exists keys whose( (name of it = “DDE7F2BCF1D91C3409CFF425AE1E271A”) AND (exists key whose (name of it as string equals “InstallProperties” AND value “DisplayVersion” of it as string as version = “1.1.4322” AND value “Language” of it as integer = 2052 ) of it) AND (not exists key whose (name of it as string equals “FA6C3120265590D488C4A2CDCFC8F253”) of key “Patches” of it))of it ) OR (exists keys whose( (name of it = “DDE7F2BCF1D91C3409CFF425AE1E271A”) AND (exists key whose (name of it as string equals “InstallProperties” AND value “DisplayVersion” of it as string as version = “1.1.4322” AND value “Language” of it as integer = 1028 ) of it) AND (not exists key whose (name of it as string equals “FA6C3120265590D488C4A2CDCFC8F253”) of key “Patches” of it))of it ) OR (exists keys whose( (name of it = “DDE7F2BCF1D91C3409CFF425AE1E271A”) AND (exists key whose (name of it as string equals “InstallProperties” AND value “DisplayVersion” of it as string as version = “1.1.4322” AND value “Language” of it as integer = 1036 ) of it) AND (not exists key whose (name of it as string equals “FA6C3120265590D488C4A2CDCFC8F253”) of key “Patches” of it))of it ) OR (exists keys whose( (name of it = “DDE7F2BCF1D91C3409CFF425AE1E271A”) AND (exists key whose (name of it as string equals “InstallProperties” AND value “DisplayVersion” of it as string as version = “1.1.4322” AND value “Language” of it as integer = 3082 ) of it) AND (not exists key whose (name of it as string equals “FA6C3120265590D488C4A2CDCFC8F253”) of key “Patches” of it))of it ) OR (exists keys whose( (name of it = “DDE7F2BCF1D91C3409CFF425AE1E271A”) AND (exists key whose (name of it as string equals “InstallProperties” AND value “DisplayVersion” of it as string as version = “1.1.4322” AND value “Language” of it as integer = 1040 ) of it) AND (not exists key whose (name of it as string equals “FA6C3120265590D488C4A2CDCFC8F253”) of key “Patches” of it))of it )) of key “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products” of native registry
A: True
You can see that all the files are of the version from MS13-004
Q: (pathnames of it, versions of it) of files (“aspnet_filter.dll”;“aspnet_isapi.dll”;“aspnet_wp.exe”;“CORPerfMonExt.dll”;“mscoree.dll”;“mscorees.dll”;“mscorie.dll”;“mscorjit.dll”;“mscorld.dll”;“mscorlib.dll”;“mscorsn.dll”;“mscorsvr.dll”;“System.dll”;“System.Security.dll”;“System.Windows.Forms.dll”;“mscorwks.dll”;“System.Web.dll”) of folder (pathname of windows folder & “\Microsoft.NET\Framework\v1.1.4322”)
A: C:\Windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll, 1.1.4322.2502
A: C:\Windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll, 1.1.4322.2502
A: C:\Windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe, 1.1.4322.2502
A: C:\Windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll, 1.1.4322.2502
A: C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll, 1.1.4322.2502
A: C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll, 1.1.4322.2502
A: C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll, 1.1.4322.2502
A: C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll, 1.1.4322.2502
A: C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll, 1.1.4322.2502
A: C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll, 1.1.4322.2502
A: C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.dll, 1.1.4322.2502
A: C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll, 1.1.4322.2502
A: C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.Windows.Forms.dll, 1.1.4322.2502
A: C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll, 1.1.4322.2502
A: C:\Windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll, 1.1.4322.2502
Regards
Rob