Fixlet Modification Time set in the future

Usage and Config Patch
1

I noticed something very strange this morning. I ran a query in Session Relevance Tester for Modification Times on Fixlets and notice 27 Fixlets were modified last night, but now have a Modification Time set in the future.

Has anyone seen this before? Can anyone explain why the Modification times would be set in the future? I ran the query shortly after midnight PST for all Fixlets that have a Modification Time > now. I got back 27 Fixlets.

Query:
(id of it, (id of it, name of it) of sites of it, name of it, modification times of it) of bes fixlets whose (modification time of it > now)

Results:
89, ( 75, Client Manager for Anti-Virus ), McAfee GroupShield 7.0.x for Microsoft Exchange - Update for Virus Definition Files, ( Thu, 07 Mar 2019 03:00:48 -0800 )
90, ( 75, Client Manager for Anti-Virus ), McAfee Security 7.6 for Microsoft Exchange - Update for Virus Definition Files, ( Thu, 07 Mar 2019 03:00:48 -0800 )
94, ( 75, Client Manager for Anti-Virus ), McAfee Security 7.6/8.0 for Microsoft Exchange - Update for Virus Definition Files (x64), ( Thu, 07 Mar 2019 03:00:48 -0800 )
224, ( 75, Client Manager for Anti-Virus ), McAfee AVERT Stinger - Deploy, ( Thu, 07 Mar 2019 03:00:48 -0800 )
230, ( 75, Client Manager for Anti-Virus ), McAfee AVERT Stinger - Update, ( Thu, 07 Mar 2019 03:00:48 -0800 )
603, ( 75, Client Manager for Anti-Virus ), UPDATE: Outdated McAfee Virus Definition Detected, ( Thu, 07 Mar 2019 03:00:48 -0800 )
606, ( 75, Client Manager for Anti-Virus ), UPDATE: Outdated Symantec Anti-Virus Virus Definition Detected - Windows 95/98/ME, ( Thu, 07 Mar 2019 03:00:48 -0800 )
607, ( 75, Client Manager for Anti-Virus ), UPDATE: Outdated Symantec Anti-Virus Virus Definition Detected - Windows NT/2000/XP/2003/Vista/2008/7/2008 R2, ( Thu, 07 Mar 2019 03:00:48 -0800 )
608, ( 75, Client Manager for Anti-Virus ), UPDATE: Outdated Symantec Anti-Virus Corporate Edition Virus Definition Detected, ( Thu, 07 Mar 2019 03:00:48 -0800 )
612, ( 75, Client Manager for Anti-Virus ), UPDATE: Outdated Trend Micro OfficeScan Virus Pattern File Detected - Windows 95/98/ME, ( Thu, 07 Mar 2019 03:00:48 -0800 )
614, ( 75, Client Manager for Anti-Virus ), UPDATE: Outdated Trend Micro ServerProtect Virus Pattern File Detected, ( Thu, 07 Mar 2019 03:00:48 -0800 )
619, ( 75, Client Manager for Anti-Virus ), UPDATE: Outdated McAfee Virus Definition Detected - NetShield 4.5, ( Thu, 07 Mar 2019 03:00:48 -0800 )
624, ( 75, Client Manager for Anti-Virus ), UPDATE: Outdated McAfee Virus Definition Detected - McAfee VirusScan 8i/8.5i/8.7i/8.8i, ( Thu, 07 Mar 2019 03:00:48 -0800 )
627, ( 75, Client Manager for Anti-Virus ), UPDATE: Outdated Symantec Anti-Virus Corporate Edition Virus Definition Detected - Windows NT, ( Thu, 07 Mar 2019 03:00:48 -0800 )
631, ( 75, Client Manager for Anti-Virus ), UPDATE: Outdated Symantec Anti-Virus Corporate Edition Virus Definition Detected - Windows XP/2003 (x64), ( Thu, 07 Mar 2019 03:00:48 -0800 )
634, ( 75, Client Manager for Anti-Virus ), UPDATE: Outdated Symantec Endpoint Protection Virus Definition Detected, ( Thu, 07 Mar 2019 03:00:48 -0800 )
636, ( 75, Client Manager for Anti-Virus ), UPDATE: Outdated McAfee Virus Definition Detected - McAfee VirusScan 8.x/9.x for Mac, ( Thu, 07 Mar 2019 03:00:48 -0800 )
638, ( 75, Client Manager for Anti-Virus ), UPDATE: Outdated Symantec Anti-Virus / Endpoint Protection Virus Definition Detected - Symantec AntiVirus 10.2 / Enpoint Protection 12 for Macintosh (Intel CPU), ( Thu, 07 Mar 2019 03:00:48 -0800 )
643, ( 75, Client Manager for Anti-Virus ), UPDATE: Outdated Trend Micro ServerProtect Virus Pattern File Detected (x64), ( Thu, 07 Mar 2019 03:00:48 -0800 )
653, ( 75, Client Manager for Anti-Virus ), UPDATE: Outdated Symantec Endpoint Protection Virus Definition Detected (x64), ( Thu, 07 Mar 2019 03:00:48 -0800 )
662, ( 75, Client Manager for Anti-Virus ), UPDATE: Outdated McAfee Virus Definition Detected - McAfee VirusScan 8i/8.5i/8.7i/8.8i (x64), ( Thu, 07 Mar 2019 03:00:48 -0800 )
664, ( 75, Client Manager for Anti-Virus ), UPDATE: Outdated McAfee Virus Definition Detected - McAfee Endpoint Security 10.x (x64), ( Thu, 07 Mar 2019 03:00:48 -0800 )
665, ( 75, Client Manager for Anti-Virus ), UPDATE: Outdated McAfee Virus Definition Detected - McAfee Endpoint Security 10.x, ( Thu, 07 Mar 2019 03:00:48 -0800 )
666, ( 75, Client Manager for Anti-Virus ), UPDATE: Outdated McAfee Virus Definition Detected - McAfee Endpoint Security 10.x for Mac, ( Thu, 07 Mar 2019 03:00:48 -0800 )
668, ( 75, Client Manager for Anti-Virus ), UPDATE: Outdated Symantec Endpoint Protection 14 Virus Definition Detected (x64), ( Thu, 07 Mar 2019 03:00:48 -0800 )
669, ( 75, Client Manager for Anti-Virus ), UPDATE: Outdated Symantec Endpoint Protection 14 Virus Definition Detected, ( Thu, 07 Mar 2019 03:00:48 -0800 )
670, ( 75, Client Manager for Anti-Virus ), UPDATE: Outdated Symantec Endpoint Protection 14 Virus Definition Detected for Macintosh (Intel CPU), ( Thu, 07 Mar 2019 03:00:48 -0800 )

2

What was the “now” when you ran this? Were they off by a few hours or days or?

3

Hi Alan,

I ran this shortly after midnight, so 12AM’ish PST. The returned modification time for all of these shows 3AM PST. That puts them 3 hours in the future. My guess is that they where actually modified at 3AM EST.

4

Hi Alan, well it happened again tonight. Session relevance ran just after 10PM PST and it detected 27 fixlets that have a modification time 6 hours in the future. Same content site as before, Site ID = 75, Site Name = Client Manager for Anti-Virus. The modification time shows that same for all 27 fixlets at Mon, 18 Mar 2019 04:08:15 -0700. Again, this was ran Sun, 17 Mar 2019 after 10:10PM -0700.

Any ideas? Is there something wrong with the auto generation mechanism for this content site?

Thanks.

5

Unfortunately, I continue to find fixlets that have been modified in the future.

(name of it, modification time of it) of bes fixlets whose (id of site of it = 5095 AND id of it = 14011137)

Results in:
Google Chrome 73.0.3683.103 Available, ( Fri, 05 Apr 2019 19:18:10 -0700 )

Any ideas? @AlanM , do you have any additional thoughts?

This was executed at Fri, 05 Apr 2019 18:06:00 -0700