Fixlet 1205437 - Possible false positive

Usage and Config Patch
1

(imported topic written by SLB)

Hi,

Could you investigate possible false positive for fixlet 1205437 please. We are seeing a number of machine reporting relevant for this fixlet but upon investigation, the files are at the expected version and the patch will fail to install stating the update is not applicable. MBSA scan does not report the patch as missing.

I broke down the fixlet relevane into QNA and it seem that its the CBS regsitry keys being missing that are causing the fixlet to report as relevant though the files are of the patches versions. The update is not listed in View Installed Updates.

Q: NOT(exists names whose (it as string contains “6.1.2.0”) of values of keys whose (name of it contains “Package_for_KB2705219”) of key “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageIndex” of native registry)

A: True

T: 0.107 ms

Q: ((exists file “browcli.dll” whose ((version of it >= “6.1.7601.17000” AND version of it < “6.1.7601.17887”) OR (version of it >= “6.1.7600.20000” AND version of it < “6.1.7600.21256”) OR (version of it >= “6.1.7601.22000” AND version of it < “6.1.7601.22044”) OR (version of it >= “6.1.7600.16000” AND version of it < “6.1.7600.17056”)) of it) OR (exists file “browser.dll” whose ((version of it >= “6.1.7601.17000” AND version of it < “6.1.7601.17887”) OR (version of it >= “6.1.7600.20000” AND version of it < “6.1.7600.21256”) OR (version of it >= “6.1.7601.22000” AND version of it < “6.1.7601.22044”) OR (version of it >= “6.1.7600.16000” AND version of it < “6.1.7600.17056”)) of it) OR (exists file “netapi32.dll” whose ((version of it >= “6.1.7601.17000” AND version of it < “6.1.7601.17887”) OR (version of it >= “6.1.7600.20000” AND version of it < “6.1.7600.21256”) OR (version of it >= “6.1.7601.22000” AND version of it < “6.1.7601.22044”) OR (version of it >= “6.1.7600.16000” AND version of it < “6.1.7600.17056”)) of it)) of (system x64 folder)

A: False

T: 5.819 ms

Q: ((exists file “browcli.dll” whose ((version of it >= “6.1.7601.17000” AND version of it < “6.1.7601.17887”) OR (version of it >= “6.1.7600.20000” AND version of it < “6.1.7600.21256”) OR (version of it >= “6.1.7601.22000” AND version of it < “6.1.7601.22044”) OR (version of it >= “6.1.7600.16000” AND version of it < “6.1.7600.17056”)) of it) OR (exists file “browser.dll” whose ((version of it >= “6.1.7601.17000” AND version of it < “6.1.7601.17887”) OR (version of it >= “6.1.7600.20000” AND version of it < “6.1.7600.21256”) OR (version of it >= “6.1.7601.22000” AND version of it < “6.1.7601.22044”) OR (version of it >= “6.1.7600.16000” AND version of it < “6.1.7600.17056”)) of it) OR (exists file “netapi32.dll” whose ((version of it >= “6.1.7601.17000” AND version of it < “6.1.7601.17887”) OR (version of it >= “6.1.7600.20000” AND version of it < “6.1.7600.21256”) OR (version of it >= “6.1.7601.22000” AND version of it < “6.1.7601.22044”) OR (version of it >= “6.1.7600.16000” AND version of it < “6.1.7600.17056”)) of it)) of (system wow64 folder)

A: False

T: 5.803 ms

Thanks & Regards

Rob

2

(imported comment written by sylviabeing)

Thanks for reporting.

We will look into it.

Regards,

Sylvia

3

(imported comment written by sylviabeing)

Hi Rob,

You are right. The CBS checking is not doing the right job here.

Please try this query instead and let me know if it works for you.

Q: (number of (elements of ((set of (if (exists key “HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages” of native registry) then elements whose (it contains “KB2705219” AND it does not contain “") of ((set of ((substrings before “~” of substrings after "for” of names of keys whose (name of it contains “for_” AND (it = 96 or it = 112 or it = 6 or it = 7) of (value “CurrentState” of it as integer)) of key “HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages” of native registry) as uppercase))) else (nothing))))) < 1)

Regards,

Sylvia

4

(imported comment written by SLB)

Hi Sylvia,

I was out the office last week so appologies for the delayed reply. The relevance you supplied is evaluating as False where the current CBS detection in the fixlet is reporting True so would appear to correct some false positives.

Regs

Rob

5

(imported comment written by liuhoting)

This is a little trick timing because of Thanksgiving being so close, but I suspect we’ll get this revised content out by early next week.

6

(imported comment written by sylviabeing)

Hi rob,

Sorry that there was a delay in republishing.

The content has been modified and republished.

Published site version:

Patches for Windows (English), version 1893

Regards,

Sylvia