Hi,

It is now possible to automate the patching of Hyper-v failover clusters in Server 2012 R2 with cluster aware updating (CAU).

Is it possible to use Shavlik with CAU, either as a source for patches or in the form of a plugin?

Thanks,

Hi,

KB2984930 remediates a bug introduced by MS14-039 (KB2973201). After having installated this bugfix, Shavlik Protect warns "File version is less than expected. [C:\ProgramFiles\Common Files\MICROSOFT SHARED\INK\TIPSKINS.DLL 6.1.7601.18532< 6.1.7601.22722]".

The file versions of TIPSKINS.DLL
-   before the bugfix was applied  6.1.7601.18512

-   after the bugfix was applied    6.1.7601.18532

In the article http://support.microsoft.com/kb/2984930/en-us Microsoft enlists both versions:

Tipskins.dll    6.1.7601.18532    1,247,232    14-Jul-2014    02:02    x64

Tipskins.dll    6.1.7601.22743    1,247,232    14-Jul-2014    01:52    x64

The "File information" section is introduced by an explanation about the differing versions:

The files that apply to a specific product, SR_Level (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:

So why shouldwe have a LDR version after having updated from a GDR version?

Thanks for considering this issue.

Klaus Uhr

HI,

I got deployment issues with the following MS Office 2010 & 2013 patches, Shavlik Protect detects all the following patches as missing but it did not deploy them.

1) KB2878284 - Shavlik Protect says installation failed when I try to deploy through Protect, but Windows says "There is no product affected by this package installed on this system" when I deploy manually.

2) KB2880463 - Protect failed to deploy, but Windows throws up message "There is no product affected by this package installed on this system" when I deploy manually.

3) KB2880991 - Protect failed to deploy, but Windows throws up message "There is no product affected by this package installed on this system" when I deploy manually.

4) KB2881005 - Protect failed to deploy, but Windows throws up message "The Update is already installed on the system" when I deploy manually.

5) KB2881014 - Protect failed to deploy, but Windows throws up message "The Update is already installed on the system" when I deploy manually.

Any help would be appreciated.

Thanks

Srikanth

When running the Shavlik Protect or VMware vCenter Protect console in a secure environment without Internet access, it is necessary to download the latest data files on a system that has internet access and then transfer them to the console machine.

This article applies only to patch data.

This article discusses both methods:

• PowerShell (Highly Recommended)
• Individual file download (All Files Are Required)

PowerShell

To use the PowerShell script:

• Download and install PowerShell 1.0 from Microsoft, if it is not already installed. For more information, see Microsoft KB article 926140.
• Shavlik NetChk Protect and VMware vCenter Protect patch files are released twice per week. To download the patch files, you can use a PowerShell script to automate the process or you can download each file individually.
• If you need a compression utility, download and install the 7-Zip extraction utility from http://www.7-zip.org/download.html.

          Shavlik does not endorse or recommend any particular third_party utility.

• Create an output directory.
• Download and extract the PowerShell script attached to this article: DownloadProtectData90.zip

  This script works for all versions of these products.

• Open a command prompt.
• Enter PowerShell by typing powershell.
• Navigate to the location where you extracted the PowerShell script.
• At the PowerShell command prompt, launch the script with this command:
  
  .\DownloadProtectData90.ps1 "<outputdirectory>" <major or minor version> "<7-zip directory>"
  
    The command begins with the characters . before the script name. These characters are required if the script is in the current working directory. If you are in a different directory, enter the full path to the script.
  
  The major/minor version argument has a two-digit value. Use the value corresponding to your version:

• Protect 9.0: 90
• Protect 9.1: 91

Example:

The command you run looks like this: .DownloadProtectData90.ps1 "C:\Data" 90 "C\:program Files\7-Zip"

The command has these elements:

• .\DownloadProtectData.ps1: This is the script itself.
• c:\Data: This is the folder to which you are downloading the data files.
• 90: This is the version of vCenter Protect or Shavlik Protect files you are downloading.

1. You may see this error:
   
   execution of scripts is disabled on this system
   
   If this occurs, enable the execution of scripts by entering this command:
   
   set-executionpolicy RemoteSigned

  This command is case-sensitive.
   
   Alternatively, you can sign the script instead of changing the execution policy. For more information, see http://www.hanselman.com/blog/SigningPowerShellScripts.aspx.    The preceding link was correct and last checked as of June 11, 2013.

Individual file download

You can manually download the necessary data files. To download the files:

1. Right-click each link and select Save Link As.
2. Save the files to the console, in the DataFiles folder. This is the default location:
   • 8.x on Vista, 2008, & Windows 7: C:ProgramData\Shavlik Technologies\NetChk\DataFiles
   • 8.x on Windows XP or 2003: C:\Documents and Settings\All Users\Application Data\Shavlik Technologies\NetChk\DataFiles
   • 9.x on Vista, 2008, & Windows 7: C:\ProgramData\LANDesk\Shavlik Protect\Console\DataFiles
   • 9.x on Windows XP or 2003: C:Documents and SettingsAll UsersApplication Data\LANDesk\Shavlik Protect\Console\DataFiles

  The Protect console requires both the .CAB and the files archived within the .CAB files for Protect to function correctly. The PowerShell script downloads the .CAB files, places the files in the output directory, and extract the files to the output directory. You need to manually extract the .CAB files using an archiving tool like 7-Zip if you choose to manually download the .CAB files.

Update files for Shavlik Protect 9.0:

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STPlatformUpdater.exe

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/AssetInstaller.msi

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/PatchInstaller.msi

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/ThreatInstaller.msi

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/cl5.exe

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/ST.Licensing.Data.dll

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/DplyEvts.dll

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/7z.dll

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/SafeReboot.exe

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/SafeReboot64.exe

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STSchedEx.exe

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STRemoteCommand.exe

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STScheduleView.exe

http://xml.shavlik.com/data/hf7b.xml

http://xml.shavlik.com/data/pd5.xml

http://xml.shavlik.com/data/iadata.xml

http://xml.shavlik.com/data/ai_dpd.xml

http://xml.shavlik.com/data/scriptcatalog.zip

http://xml.shavlik.com/data/assetinventory.xml

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STPlatformUpdater.cab

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/cl5.cab

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/ST.Licensing.Data.cab

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/DplyEvts.cab

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/7z.cab

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/SafeReboot.cab

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/SafeReboot64.cab

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STSchedEx.cab

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STRemoteCommand.cab

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STScheduleView.cab

http://xml.shavlik.com/data/hf7b.cab

http://xml.shavlik.com/data/pd5.cab

http://xml.shavlik.com/data/iadata.cab

http://xml.shavlik.com/data/ai_dpd.cab

http://xml.shavlik.com/data/hypervisors.cab

http://xml.shavlik.com/data/assetinventory.cab

http://xml.shavlik.com/data/Protect/v9/90/manifest/protect.manifest.cab

Update files for Shavlik Protect 9.1:

http://xml.shavlik.com/data/protect/v9/91/protect/4334/7z.dll

http://xml.shavlik.com/data/hf7b.xml

http://xml.shavlik.com/data/protect/v9/91/protect/4334/cl5.exe

http://xml.shavlik.com/data/protect/v9/91/protect/4334/safereboot.exe

http://xml.shavlik.com/data/protect/v9/91/protect/4334/safereboot64.exe

http://xml.shavlik.com/data/protect/v9/91/protect/4334/stschedex.exe

http://xml.shavlik.com/data/protect/v9/91/protect/4334/stremotecommand.exe

http://xml.shavlik.com/data/protect/v9/91/protect/4334/stscheduleview.exe

http://xml.shavlik.com/data/pd5.xml

http://xml.shavlik.com/data/ai_dpd.xml

http://xml.shavlik.com/data/protect/v9/91/protect/4334/assetinstaller.msi

http://xml.shavlik.com/data/protect/v9/91/protect/4334/patchinstaller.msi

http://xml.shavlik.com/data/protect/v9/91/protect/4334/threatinstaller.msi

http://xml.shavlik.com/data/protect/v9/91/protect/4334/st.licensing.data.dll

http://xml.shavlik.com/data/protect/v9/91/protect/4334/dplyevts.dll

http://xml.shavlik.com/data/iadata.xml

http://xml.shavlik.com/data/scriptcatalog.zip

http://xml.shavlik.com/data/supportedHypervisors.obf

http://xml.shavlik.com/data/protect/v9/91/protect/4334/stplatformupdater.exe

http://xml.shavlik.com/data/assetCatalog2.obf

http://xml.shavlik.com/data/assetCatalogMetadata2.obf

http://xml.shavlik.com/data/protect/v9/91/protect/4334/7z.cab

http://xml.shavlik.com/data/hf7b.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4334/cl5.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4334/safereboot.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4334/safereboot64.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4334/stschedex.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4334/stremotecommand.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4334/stscheduleview.cab

http://xml.shavlik.com/data/pd5.cab

http://xml.shavlik.com/data/ai_dpd.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4334/st.licensing.data.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4334/dplyevts.cab

http://xml.shavlik.com/data/iadata.cab

http://xml.shavlik.com/data/supportedHypervisors.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4334/stplatformupdater.cab

http://xml.shavlik.com/data/assetCatalog2.cab

http://xml.shavlik.com/data/assetCatalogMetadata2.cab

http://xml.shavlik.com/data/Protect/v9/91/manifest/protect.manifest.cab

Shavlik Protect and VMware vCenter Protect consoles that have no internet connectivity, but that still try to download updates automatically can experience other issues. Shavlik recommends setting consoles with no internet connectivity to Disconnected Mode. To enable Disconnected Mode from the console application:

Version 8.x: Go to Tools and select Run Disconnected.

Version 9.x: Go to Tools and deselect Auto-Update Definitions.

Document Content Update History

11/1/2011 - Updated article for VMware vCenter Protect 8.0.x 

07/16/2013 - Updated article for Shavlik Protect 9.0.x

05/21/2014 - Updated article for Shavlik Protect 9.1.x

Shavlik Protect 9.x

VMware vCenter Protect 8.x

Does Shavlik look for Oracle Virtual Box security patches? Is it possible to push virtual box .exe with Shavlik?

This is our first attempt to patch a VMware template and after configuring the correct permissions and accounts it access the host and guests but I receive the following when doing a scan.

"Complete with errors, Check the hypervisor network configuration and firewall settings".

What is this error directing me to check or what could be the issue?

Hi Support Team,

User asked "Does Shavlik access the packager executable on the target host via SMB/Windows file sharing"

They've asked this as they're seeing some unusual traffic that they need an explanation for -

Signature: "ETPRO EXPLOIT Possible Microsoft Windows Object Packager Packager.exe Insecure Library Loading Code Execution - SMB-DS Unicode”"
Source Systems: 192.168.182.28 (cscaucvwpsha01) and 192.168.182.29 (cscaucvwpsql01)
Targets: multiple GE hosts in multiple subnets

File accessed: C:\WINDOWS\SYSTEM32\PACKAGER.EXE

Please suggest, Thanks in Advance.

Symptoms

When attempting to run the Shavlik Migration tool you get the following warning in your PowerShell cmd

Cause

You have already installed version 9.1 on your new system and the Migration Tool is built into Protect, you can go to Start\All Programs\Shavlik Protect\Migration Tool and run the Migration GUI from there

Shavlik Protect Migration Tool User's Guide for 9.1

http://www.shavlik.com/uploadedFiles/Support/Online_Documentation/Shavlik_Protect_90/mtg-prt-9-1.pdf

Good day everyone. If we turn off a computer's Automatic Windows update function, does this affect agent-based Shavlik ProtectCloud from loading any MS or Windows updates? Does that function have to be on or does it matter? In re: W7 and W8. Thanks.

Hello again.

I have a scheduled scan of our network set for 10:30 am. The scan didn't run until 12:47pm. I have confirmed its start time in the log, and also confirmed the schedule time on the job. What might have prevented the scan from running on time (besides the obvious, e.g., Shavlik computer offline)? This is for Shavlik 9.x non-agent scans.

I can make a support request as needed, but thought I would check in via post first. Thanks.

Symptoms

You may need to use the steps below to perform a manual uninstall of the application if you see any of the following errors during installation or upgrade of Protect:

Purpose

This article provides information on manually un-installing Shavlik Protect. This document is generally meant for the purpose of cleaning up a bad or broken installation of the Protect application.

Cause

Occasionally, the application may not be removed completely due corruption to the Windows Installer, Installer folder or other corruption to the automated uninstall process. When this occurs a manual un-install of the application is necessary.

Resolution

Microsoft provides assistance with the manual uninstall process by providing a Fix it tool.  The link to the tool is:  http://support.microsoft.com/mats/Program_Install_and_Uninstall

Here are instructions on how to use the Fix it tool

1. Use the link above to navigate to the Fix it main page.
2. Click on ‘Run Now’ and choose ‘Save File’.
3. Run the EXE that is downloaded and choose ‘Accept’ on the first page.
4. Choose the second option ‘Detect problems and let me select the fixes to apply’.
5. Choose the ‘Uninstalling’ option
6. You will see a list of the installed products on the server.  Choose the product if you see it on the list for instance. ‘Shavlik Protect’.  If you do not see the product on the list then select ‘Not listed’.

If Shavlik Protect, vCenter Protect, or Netchk Protect is listed:

1. Choose the corresponding name and click ‘Next’.
2. Choose ‘Yes, try uninstall’
3. Verify both options are check-marked and click ‘Next’.
4. You should see a screen that indicates whether Protect was uninstalled or not.
5. Click ‘Next’ and the close out of the screen.

If Shavlik Protect, vCenter Protect, or Netchk Protect is Not Listed:

1. Choose ‘Not Listed’ and click ‘Next’.
2. Enter the product code for the version of the Product installed and click ‘Next’. (Include the brackets)

     Product codes for Protect are listed below.

1. Verify both options are check-marked and click ‘Next’.
2. You should see a screen where it indicates whether the product was uninstalled or not.
3. Click ‘Next’ and the close out of the screen.

Product GUID codes:

Affected Product(s)

Shavlik NetChk Protect 7.x
VMware vCenter Protect 8.x

Shavlik Protect 9.x

We have multiple scans and it would be nice to differentiate between the mass amounts of alerts we get.

Hi there,

I am using Shavlik Protect Standard 9.1.0  Build: 4334 on a W7, 64-bit with MS-Office 2010 installed.

I scan 'My Machine' and it lists 11 patches as missing (see Pic1 - below).

A reboot is scheduled and completes (normal countdown timer, etc).

Once the machine reboots I do a further scan of my machine but find it has no installed any of the 11 patches (see Pic2 - below).

Running Windows Update I am told that 'Windows is up to date'.

Any assistance would be appreciated.

Thanks,

Kim.

Pic1:

Pic2:

The new purchasing policy for Shavlik is absurd for small businesses. Now you have to buy 10 licenses of the same kind at a time, either 10 server or 10 workstation.

I configured 2 new virtual machines and wanted to buy 2 new server licenses. Instead of 2 licenses, I have to pay over $570 for 10 licenses, 8 of which will not be used. This may not seem like a lot of money but for a small business it is a factor. I would use them for workstations but I already have 5 extra licenses because of the senseless 45 days requirement for a machine to disappear.

Also, it would have been nice for Shavlik to blast an email to their customers telling them of this new policy before it went into effect. Now I am stuck with Windows Defender and Windows Updates on two of my VMs.

As I said, this is not a big deal for large corporations, but the little guy is getting

Hi,

I have McAfee ePO as a Whitelisting software in my domain. By default Whitelisting software blocks everything, hence ePO blocks Patch installation batch files at "C:\Windows\ProPatches\Install" from execution.

In order to enable Shavlik Protect to run this batch file, I have to add the executable which creates this batch file to the McAfee Whitelist. Can anybody tell me which process actually creates the patch installation batch files.

Thanks

Srikanth Badireddy

Protect console service error says its stopped but it is running. I've stopped and restarted the service several times but Shavlik still doesn't connect.

How do I fix this problem? I appreciate any help provided.

Symptoms

• Scheduled Scan or Deployments fail.
• The following error may be seen in an event or within the scheduler.log from C:\Windows\Propatches\Scheduler on a target system:
  Error 10038: An operation was attempted on something that is not a socket.
• Within the ST.Protect.native log you may see an error such as the following:
  The service STSchedEx did not reach status Running within the specified time interval.
• You may see the following error message:
  The ST Remote Scheduler Service service on Local Computer started and then stopped. Some services stop automatically if they are not in use by other services or programs.

Cause

StSchedEx.exe is attempting to listen on something other than the port specified in Protect Tools > Options > Scheduling. This is related to a known issue.

Resolution

This is a known issue that can occur in Protect 9.1.4334.0. This has been defected by Shavlik and should be fixed in the near future.

Workaround:

Go into Protect, Tools > Options > Scheduling and set the scheduling method to use the Microsoft Scheduler. This alternate method of scheduling will use the Microsoft Task Scheduler as a workaround.

Affected Products

Shavlik Protect 9.1.4334.0

How do I change the job name on a scheduled job?

Hi,

We encounter a strange behavior while deploying .Net framework patches.

To save time, We want to deploy security patches (windows and .Net patches) on the servers in the morning and perform a reboot in the evening. Because we

can't reboot servers during office hours.

So, after scanning the servers we deploy the patches with a template configured without reboot (before nor after).

Windows patches install perfectly, .Net Framework patches starts but do nothing as if they're waiting for some input or a mouseclick on the console. The

deployment stays like this for ages.

If we kill the .Net patch executable on the server, the next .Net patch starts with the same behavior and so on... until all the .Net patches are deployed.

After this, the deployment of the rest of the patches runs without a problem.

Installing the .Net patches manually on the server works like a charm.

So, another strange thing is, when we deploy the same set of patches on the same set of servers by using a template configured with a reboot after the

deployment, the deployment of the .Net patches cause no problems.

Can someone help us out with this ?

We've found a workaround for this but it's very time-consuming :

- We copy the patches to the servers by using a template configured with a reboot after the deployment. ("copy files to selected machines but do not install"

option)
- We logon to each server and open the deployment batch file in the c:\windows\propatches\install folder
- Change the parameter Set REBOOTOPT= from 1 to 0
- Scroll down to the end of the file
- Remove these lines :

"%PATHTOFIXES%cl5.exe" 1024 974 "Rebooting machine"
"%PATHTOFIXES%cl5.exe" 2097196 974 "%PATHTOFIXES%safereboot.exe" " -m 1 -o 1 -s 1 -i 1 -w 60 -power 4 -requestor 1" "HF_Reboot"

- Save the batch file and dubbleclick it

Thanks in advance

Hi,

I've a strange issue here.

I've just upgraded my Shavlik Protect to 9.1 Build 4334 and when I want to scan some machine groups, the first point (Check for new definitions) is green but I've not the MS14-051 (Published: August 12, 2014).

If I try to do Help -> Refresh files, I can see this:

Downloading the latest manifest...

Downloading latest engines and definitions...

Downloaded stScheduleView.exe.

Downloaded 7z.dll.

Downloaded safereboot.exe.

Downloaded StSchedEx.exe.

Downloaded STRemoteCommand.exe.

Downloaded AssetInstaller.msi.

Downloaded ThreatInstaller.msi.

Downloaded safereboot64.exe.

Downloaded cl5.exe.

Downloaded ai_dpd.xml.

Downloaded assetCatalogMetadata2.obf.

Downloaded hf7b.xml.

Downloaded DplyEvts.dll.

Downloaded iadata.xml.

Downloaded PatchInstaller.msi.

Error: File not downloaded: scriptcatalog.zip

Error reason: File 'C:\ProgramData\LANDESK\Shavlik Protect\Console\DataFiles\scriptcatalog.zip' failed signature check: http://xml.shavlik.com/data/scriptcatalog.zip

Downloaded assetCatalog2.obf.

Downloaded ST.Licensing.Data.dll.

Downloaded pd5.xml.

Downloaded supportedHypervisors.obf.

Downloaded STPlatformUpdater.exe.

Failed to download 1 file(s).

Reloading definitions...

Updating database with new definitions...

Checking for definition changes...

Updating the database with the latest definitions...

The database has been updated with the latest definitions.

Downloading latest IT scripts...

Error: File not downloaded: scriptcatalog.zip

Error reason: File 'C:\ProgramData\LANDESK\Shavlik Protect\Console\DataFiles\scriptcatalog.zip' failed signature check: http://xml.shavlik.com/data/scriptcatalog.zip

Failed to download 1 file(s).

All engines and definitions are up to date.

Downloading PowerShell modules...

Importing ITScripts...

Process complete.

So I found this doc: How to trouble shoot failed to download the latest manifest file issue.

I followed the resolution and I'm able to download the file via IE, but the Refresh File give the same result.

Another thing is that in Help -> About, I have

Data Versions

Patch Assestment

X 2.0.0.8158

Patch deployment

X 2.0.0.8158

Asset management

V 2.0.0.3

ITScripts

V 3.0.56.1