Hello,

We're using entirely agent-based patching across about 135 stations with Shavlik Protect Standard 9.0.0.1304 (at the moment.) I've approved a bunch of patches this morning, and I'm trying a couple machines to see if they're being applied, however, the agent GUI doesn't show any activity. When I first opened the agent GUI, the most recent item was from Feb 7, as if nothing had happened since then. After reboot, it appears to show everything up until the reboot. The 'run patch task' button doesn't appear to do anything, but becomes grey, and 'perform agent check-in' or 'update agent binaries' don't appear to do anything either. After another reboot, it will show that the agent was, in fact, doing these things, but the GUI just doesn't update that anything is happening.

When I install a new agent on a new deployment, it appears to work as expected, and updates the GUI in real-time, but it seems that after a while, the GUI just stops showing any activity at all. It seems the agents work, I just can't tell what is happening without multiple reboots (which is particularly unhelpful if there are multiple patches being installed, and I can't see it...)

Anyone else seen anything like this?

TIA.

Purpose

This document outlines how to run a DPDTrace. This may be necessary when troubleshooting detection issues.

Steps

DPD stands for Dynamic Product Detection.  It’s the method our scan engine uses to determine what supported products are installed on the machine. This tool was created for troubleshooting patch scan issues where we need to know what is going on during the DPD process.

.Net Framework v4.0.30319 or newer needs to be installed for this to work

1. Download DPDTrace.zip (See attachment at bottom of this page) and extract the file into a folder on the root of C:\
2. Read Disclaimer.txt.
3. Open a Command Prompt and change directory to C:\DPDTrace

4. Enter the following command, replacing {MACHINE_NAME} {ADMIN_USER_NAME} {PASSWORD} and {PATCHTYPE} with corresponding values. ({MACHINE_NAME} has to be the Target machine that is having the detection problem

          DPDTrace.bat {MACHINE_NAME} {ADMIN_USER_NAME} {PASSWORD} {PATCHTYPE}

5.      When the command line is run, a window titled 'Rename HF.1 Log' will appear with an OK button. Do not close this window as the scan continues.

6.    When the scan has completed the command prompt window will say 'Test Complete  Please zip up HFCLi folder and send it back to us'. Please verify that an XML document has been created in the HFCLI folder. If it has, please zip up the directory "C:\DPDTrace\HFCLI" and send it back for analysis.

Additional Information

Please include the following registry exports from the target machine.  This will not only save time, it will also greatly increase our chances of determining the root cause of the detection issue and correcting it.

• HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432\Microsoft\Windows\CurrentVersion\Uninstall
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
• HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products

Affected Products

All

So we have a system running the Shavlik Agent that was/is infected with the CryptoWall 3.0 virus. It's been infected since the 26th and we just noticed it. AV definitions are dated yesterday. No quarantine, no detection. Really disappointed in this as I've been a big proponent of the Vipre AV engine for some time but if they can't keep us protected, we may need to change to another engine that can.

Just a heads up to everyone else out there using Shavlik/Vipre as their AV engine.

I have four computers that are getting the correct patch definition from the management server; however, the client and server don't agree on patch count.  As an example, the clients have definition 2.0.1.1172 as pushed by the server.  When scanned, the scan results for these four computers show two patches and one service pack missing.  Screenshots from the Shavlik agent on the client show Zero patches and Zero service packs missing.  So who's telling the truth?

I have shavlik installed and we use more machine groups. These groups contains the computers of which are located in an specific Active Directory OU (per machine group 2 organizational units). But I see that randomly 100 computers are located in an unknown group. I can add these systems to the group where I want to have them but they will still remain in the "unknown" group.

We have 3 machines that need an specific version of Java. But via Shavlik we deploy the newest version. Is there an possibility to decline the java updates for specific computers?

I am using Shavlik reports to see what workstations have Microsoft EMET installed and it comes back blank but if I log into the workstation it is installed.  Why is Shavlik reports  not accurate??

Console A has internet access

Console B behind Firewall

Console C behind Firewall

Is it possible to data rollup from C to B.  Then B rollup to A.   Console C cannot go direct to A it must pass thru B before it goes to A.   I want to know if A will see the missing patches from B and C.

Thanks

Purpose

When running the Shavlik Protect in a secure environment without Internet access, it is necessary to download the latest data files on a system that has internet access and then transfer them to the console machine.

This article applies only to patch data.

Description

This article discusses both methods:

• PowerShell (Highly Recommended)
• Individual file download (All Files Are Required)

PowerShell

  Running the script on a Windows 7 SP1 system with the natively installed PowerShell does not work with the execution policy set to "RemoteSigned". You will still receive an error that the script is not digitally signed. The script will only run if the execution policy is set to "unrestricted"

To use the PowerShell script:

• Download and install PowerShell 1.0 from Microsoft, if it is not already installed. For more information, see Microsoft KB article 926140.
• Shavlik NetChk Protect and VMware vCenter Protect patch files are released twice per week. To download the patch files, you can use a PowerShell script to automate the process or you can download each file individually.
• If you need a compression utility, download and install the 7-Zip extraction utility from http://www.7-zip.org/download.html.

          Shavlik does not endorse or recommend any particular third_party utility.

• Create an output directory.
• Download and extract the PowerShell script attached to this article: DownloadProtectData90.zip

  This script works for all versions of these products.

• Open a command prompt.
• Enter PowerShell by typing powershell.
• Navigate to the location where you extracted the PowerShell script.
• At the PowerShell command prompt, launch the script with this command:
  
  .\DownloadProtectData90.ps1 "<outputdirectory>" <major or minor version> "<7-zip directory>"
  
    The command begins with the characters . before the script name. These characters are required if the script is in the current working directory. If you are in a different directory, enter the full path to the script.
  
  The major/minor version argument has a two-digit value. Use the value corresponding to your version:

• Protect 9.0: 90
• Protect 9.1: 91

Example:

The command you run looks like this: .\DownloadProtectData90.ps1 "C:\Data" 90 "C:\program Files\7-Zip"

The command has these elements:

• .\DownloadProtectData.ps1: This is the script itself.
• c:\Data: This is the folder to which you are downloading the data files.
• 90: This is the version of vCenter Protect or Shavlik Protect files you are downloading.

1. You may see this error:
   
   execution of scripts is disabled on this system
   
   If this occurs, enable the execution of scripts by entering this command:
   
   set-executionpolicy RemoteSigned

  This command is case-sensitive.
   
   Alternatively, you can sign the script instead of changing the execution policy. For more information, see http://www.hanselman.com/blog/SigningPowerShellScripts.aspx.    The preceding link was correct and last checked as of June 11, 2013.

Individual file download

You can manually download the necessary data files. To download the files:

1. Right-click each link and select Save Link As.
2. Save the files to the console, in the DataFiles folder. This is the default location:
   • 8.x on Vista, 2008, & Windows 7: C:ProgramData\Shavlik Technologies\NetChk\DataFiles
   • 8.x on Windows XP or 2003: C:\Documents and Settings\All Users\Application Data\Shavlik Technologies\NetChk\DataFiles
   • 9.x on Vista, 2008, & Windows 7: C:\ProgramData\LANDesk\Shavlik Protect\Console\DataFiles
   • 9.x on Windows XP or 2003: C:Documents and SettingsAll UsersApplication Data\LANDesk\Shavlik Protect\Console\DataFiles

  The Protect console requires both the .CAB and the files archived within the .CAB files for Protect to function correctly. The PowerShell script downloads the .CAB files, places the files in the output directory, and extract the files to the output directory. You need to manually extract the .CAB files using an archiving tool like 7-Zip if you choose to manually download the .CAB files.

Update files for Shavlik Protect 9.0:

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STPlatformUpdater.exe

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/AssetInstaller.msi

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/PatchInstaller.msi

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/ThreatInstaller.msi

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/cl5.exe

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/ST.Licensing.Data.dll

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/DplyEvts.dll

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/7z.dll

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/SafeReboot.exe

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/SafeReboot64.exe

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STSchedEx.exe

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STRemoteCommand.exe

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STScheduleView.exe

http://xml.shavlik.com/data/hf7b.xml

http://xml.shavlik.com/data/pd5.xml

http://xml.shavlik.com/data/iadata.xml

http://xml.shavlik.com/data/ai_dpd.xml

http://xml.shavlik.com/data/scriptcatalog.zip

http://xml.shavlik.com/data/assetinventory.xml

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STPlatformUpdater.cab

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/cl5.cab

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/ST.Licensing.Data.cab

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/DplyEvts.cab

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/7z.cab

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/SafeReboot.cab

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/SafeReboot64.cab

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STSchedEx.cab

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STRemoteCommand.cab

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STScheduleView.cab

http://xml.shavlik.com/data/hf7b.cab

http://xml.shavlik.com/data/pd5.cab

http://xml.shavlik.com/data/iadata.cab

http://xml.shavlik.com/data/ai_dpd.cab

http://xml.shavlik.com/data/hypervisors.cab

http://xml.shavlik.com/data/assetinventory.cab

http://xml.shavlik.com/data/Protect/v9/90/manifest/protect.manifest.cab

Update files for Shavlik Protect 9.1.4334:

http://xml.shavlik.com/data/protect/v9/91/protect/4334/7z.dll

http://xml.shavlik.com/data/hf7b.xml

http://xml.shavlik.com/data/protect/v9/91/protect/4334/cl5.exe

http://xml.shavlik.com/data/protect/v9/91/protect/4334/safereboot.exe

http://xml.shavlik.com/data/protect/v9/91/protect/4334/safereboot64.exe

http://xml.shavlik.com/data/protect/v9/91/protect/4334/stschedex.exe

http://xml.shavlik.com/data/protect/v9/91/protect/4334/stremotecommand.exe

http://xml.shavlik.com/data/protect/v9/91/protect/4334/stscheduleview.exe

http://xml.shavlik.com/data/pd5.xml

http://xml.shavlik.com/data/ai_dpd.xml

http://xml.shavlik.com/data/protect/v9/91/protect/4334/assetinstaller.msi

http://xml.shavlik.com/data/protect/v9/91/protect/4334/patchinstaller.msi

http://xml.shavlik.com/data/protect/v9/91/protect/4334/threatinstaller.msi

http://xml.shavlik.com/data/protect/v9/91/protect/4334/st.licensing.data.dll

http://xml.shavlik.com/data/protect/v9/91/protect/4334/dplyevts.dll

http://xml.shavlik.com/data/iadata.xml

http://xml.shavlik.com/data/scriptcatalog.zip

http://xml.shavlik.com/data/supportedHypervisors.obf

http://xml.shavlik.com/data/protect/v9/91/protect/4334/stplatformupdater.exe

http://xml.shavlik.com/data/assetCatalog2.obf

http://xml.shavlik.com/data/assetCatalogMetadata2.obf

http://xml.shavlik.com/data/protect/v9/91/protect/4334/7z.cab

http://xml.shavlik.com/data/hf7b.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4334/cl5.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4334/safereboot.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4334/safereboot64.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4334/stschedex.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4334/stremotecommand.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4334/stscheduleview.cab

http://xml.shavlik.com/data/pd5.cab

http://xml.shavlik.com/data/ai_dpd.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4334/st.licensing.data.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4334/dplyevts.cab

http://xml.shavlik.com/data/iadata.cab

http://xml.shavlik.com/data/supportedHypervisors.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4334/stplatformupdater.cab

http://xml.shavlik.com/data/assetCatalog2.cab

http://xml.shavlik.com/data/assetCatalogMetadata2.cab

http://xml.shavlik.com/data/Protect/v9/91/manifest/protect.manifest.cab

Update files for Shavlik Protect 9.1.4472:

http://xml.shavlik.com/data/protect/v9/91/protect/4446/7z.dll

http://xml.shavlik.com/data/hf7b.xml

http://xml.shavlik.com/data/protect/v9/91/protect/1048/cl5.exe

http://xml.shavlik.com/data/protect/v9/91/protect/4446/safereboot.exe

http://xml.shavlik.com/data/protect/v9/91/protect/4446/safereboot64.exe

http://xml.shavlik.com/data/protect/v9/91/protect/4446/stschedex.exe

http://xml.shavlik.com/data/protect/v9/91/protect/4446/stremotecommand.exe

http://xml.shavlik.com/data/protect/v9/91/protect/4446/stscheduleview.exe

http://xml.shavlik.com/data/pd5.xml

http://xml.shavlik.com/data/ai_dpd.xml

http://xml.shavlik.com/data/protect/v9/91/protect/4446/assetinstaller.msi

http://xml.shavlik.com/data/protect/v9/91/protect/4446/patchinstaller.msi

http://xml.shavlik.com/data/protect/v9/91/protect/4446/threatinstaller.msi

http://xml.shavlik.com/data/protect/v9/91/protect/4446/st.licensing.data.dll

http://xml.shavlik.com/data/protect/v9/91/protect/4446/dplyevts.dll

http://xml.shavlik.com/data/iadata.xml

http://xml.shavlik.com/data/scriptcatalog.zip

http://xml.shavlik.com/data/supportedHypervisors.obf

http://xml.shavlik.com/data/protect/v9/91/protect/4446/stplatformupdater.exe

http://xml.shavlik.com/data/protect/v9/91/protect/4446/stplatformupdater.exe

http://xml.shavlik.com/data/assetCatalog2.obf

http://xml.shavlik.com/data/assetCatalogMetadata2.obf

http://xml.shavlik.com/data/protect/v9/91/protect/4446/7z.cab

http://xml.shavlik.com/data/hf7b.cab

http://xml.shavlik.com/data/protect/v9/91/protect/1048/cl5.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4446/safereboot.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4446/safereboot64.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4446/stschedex.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4446/stremotecommand.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4446/stscheduleview.cab

http://xml.shavlik.com/data/pd5.cab

http://xml.shavlik.com/data/ai_dpd.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4446/st.licensing.data.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4446/dplyevts.cab

http://xml.shavlik.com/data/iadata.cab

http://xml.shavlik.com/data/supportedHypervisors.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4446/stplatformupdater.cab

http://xml.shavlik.com/data/assetCatalog2.cab

http://xml.shavlik.com/data/assetCatalogMetadata2.cab

http://xml.shavlik.com/data/Protect/v9/91/manifest/protect.manifest.cab

Additional Information

Shavlik Protect and VMware vCenter Protect consoles that have no internet connectivity, but that still try to download updates automatically can experience other issues. Shavlik recommends setting consoles with no internet connectivity to Disconnected Mode. To enable Disconnected Mode from the console application:

Version 8.x: Go to Tools and select Run Disconnected.

Version 9.x: Go to Tools and deselect Auto-Update Definitions.

Document Content Update History

11/1/2011 - Updated article for VMware vCenter Protect 8.0.x 

07/16/2013 - Updated article for Shavlik Protect 9.0.x

05/21/2014 - Updated article for Shavlik Protect 9.1.x

Products

Shavlik Protect 9.x

Purpose

The purpose of this document is to outline the process for creating a custom patch, and to provide an example of how to create a custom patch using Shavlik Protect.

Description

- Open the custom patch editor. Tools > Custom patch editor

- Next, click on Create a new custom XML file.

*Notes:

• You can add a Custom Product if this patch relates to a specific product. Although this step is not necessary it will add detection for the product itself.  In this case it is not needed as the product is the operating system. Adding a custom product will allow you to target that application for the patch. If the product is not detected it will not look for the patch.

• I created an example product called X-Zip. You will need to provide a HKEY_LOCAL_MACHINE registry key path for the software as well as the corresponding information.

- Click insert, then Add Bulletin (or right click Custom Bulletins > Add New Bulletin).

- Give the bulletin a name. In this example I used HF01-001 because it is a hotfix.

- Give the bulletin a title, typically this will be a description. In the summary portion provide any important information.

*Note: The only required field is the bulletin name.

- Click on Insert and add a custom patch (or right click Custom Patches > Add New Patch).

- Give your patch a name. In this example I used the KB as the patch name.

- Select the bulletin you created in the above steps.

- Select the type of patch, and the severity.

- From here you will add the detection information in the Scan Information tab.

*Note: This step is very important as it will identify if the system needs this patch or not. If this is a MS patch, their KB on the patch will indicate what files or registry keys are used when detecting if the patch is needed. If this is not a MS patch and you are not sure how to detect it, it is recommended to install the patch on at least one machine to verify what files and/or registry keys are involved. In the example below we are using a file to detect if the patch is missing.

- You can also target a particular application or operation system using the targeting tab. In this case, since this update is only applicable to Windows Server 2008 SP2 and Vista SP2 I selected all corresponding operating systems.

*Notes:

• Targeting is not required, however if not specified the update will be offered for all systems that meet the scanning requirements.

• If you added a custom product it will show under targeting available products. You will first need to save the XML and import the custom XML before your custom product will appear in the list.

- On the deployment tab browse to the location of the patch and select it. Protect will automatically fill in the file size. Select any install switches that are required or desired for the patch deployment. In this case since the file is a .msu we need the /quiet switch.

*Note: Click the link for more information on using .msu files: http://community.shavlik.com/docs/DOC-1902

- Next you will need to validate your XML. There will be more information in the issue column if the validation fails.

- Save your custom XML, and then click the X to close the dialog box. This will prompt for you to import the custom patch.

- Click import now.

- When the below dialog box pops up select your Custom XML file and click OK. It goes through a second validation.

- After validation the Import Patch Definitions process automatically updates the database with the latest definitions, including the newly created custom XML. If you created a custom product you should see it added as well.

- Once the definitions are updated proceed to scanning your machines.

*Notes:

• Be sure to copy the patch to the patch repository on the console so it is available for deployment. You can locate your patch repository by going to Tools > Operations, under Patch download directory.

• Make sure that the scan template you're using includes the patch filter type that applies to your custom patch when scanning (i.e. Security Patch, Non-Security, Security Tool, etc.)

• We recommend testing with one machine that needs the patch to verify everything is working properly.

- Deploy the patch and verify it installs properly.

*Note: You should now also be able to look up and view your custom patch using View > Patches in Protect.

Additional Information

Additional information about custom patch creation and use can be found in the Shavlik Help - Overview of the Custom Patch XML Process.

If the patch detects as missing correctly, but the .bat file never runs on the target system, see our knowledge base related to custom patch .bat file never completing:

Custom Patch Deployment .bat file never completes.

Affected Product(s)

Shavlik Protect 9.X

Purpose

This article provides steps to migrate an existing database for Shavlik Protect another SQL server.

Note: Before migration, ensure that Microsoft SQL Management Studio is installed on both the current database server and the destination database server. Also, ensure that no user is currently logged in to the Protect console. If you do not yet have SQL Server Management Studio, you can obtain the express editions with the links in this document: http://community.shavlik.com/docs/DOC-23132.

To migrate the database to another SQL server:

1. Open SQL Management Studio on the current database server.
2. Expand the Databases folder and locate your Protect database.

         Note: To find the file path, in SQL Management Studio, right-click the database and click Properties. Then click on Files and scroll to the right.

   3.  Right-click the Protect database and click Detach, then choose drop then click ok.

   4.  Browse to the directory where the database files are stored on the server, databasename.mdf and databasename.ldf and then copy them.

   5.  Place the files on the new server in the location of your choice.

   6.  Open SQL Management Studio on the destination machine and log in to the database engine.

   7.  Right-click the Databases folder and click Attach. 

   8.  In the Databases to attach window, click Add and point it to the databasename.mdf file you copied to the server.

        You should now be able to see the MDF and LDF files in the bottom pane.

   9.  Link the database to the Protect installation.

     To link the database to the Protect installation:

1. Log in to your Protect console machine.
2. Click Start> All Programs> Shavlik Protect.
3. Select Database setup tool.  
4. Select the Use an existing database option and click Next.  
5. Select the server name of the new database server.  
6. In the Database Name dropdown, select your Protect database.  
7. Choose the credentials that the Protect console should use to connect to the database.
8. Click Test database connection.  
9. If the test is successful, click Next.
10. The console should now be attached to this database and Protect is ready for use.

Affected Products

Shavlik Protect 9.X

I am new to Shavlik Protect, we are using version 9.1 and I was wondering how do I remove or disable certain patches (temporarily or on a permanent basis) so that when I go to scan our servers, these patches don't keep coming up in the list of missing patches?

Thanks in advance.

We have deployed the Shavlik agent to our 1200  Windows 7 laptops. These laptops are more or less unattended and are not a member of a domain.

The problem for our users is that they see continuous the MS screen while installing the patches "Restart your computer finishing important updates." Is there a registry tweak for this problem.

Gpedit is not the solution because we can not approach the laptops. A registry tweak can we can with the McAfee Agent.

Moreover, it would be nice if Shavlik would suppress this screen. Is very confusing for the average user.

regards Tom

I've been asked to determine the total number of nodes scanned within our organization.  Any suggestions how I can derive that number using the Shavlik Protect console tools or scripts?  Thanks for any input you can provide.

Hi,

we are using BladeLogic for Windows Patching, which under the hood uses the Shavlik engine.

After we updated the Patch-Metadata XML's (hf7b, pd5) in BladeLogic yesterday, we see some weird behaviour regarding FREAK and BEAST patches.

We have not deployed MS15-031 to any server yet, but doing a Patch-Analysis with the latest XML's reveals that "suddenly" all server ( > 80%) are missing patches of the Bulletin MS12-006.

This is interesting, as MS12-006 also seems to address a SSL vulnerability (BEAST).

Has anybody seen a similiar behaviour, or can explain, why this happens.

I am asking here as non of the Shavlik XML updates in the past have mentioned, that there is an update in the detection logic for MS12-006. So we are really wondering why this pops up now all of a sudden.

Again, we are just Analysing for Patches yet, not deploying.

Cheers

Steffen

I have shavlik installed and we use more machine groups. These groups contains the computers of which are located in an specific Active Directory OU (per machine group 2 organizational units). But I see that randomly 100 computers are located in an unknown group. I can add these systems to the group where I want to have them but they will still remain in the "unknown" group.

Symptoms

When running an asset scan report for software inventory, Internet Explorer does not report on versions later than IE8.

Cause

For asset scans Shavlik uses a WMI call to the machine to get a list of installed software. Starting with Internet Explorer 9, IE is now embedded into the Operating System and no longer reports when running a WMI query. In turn Shavlik is unable to report on IE versions later than IE8.

Workaround

As a workaround you can run a report based on patch scans instead. As seen below you can select only IE products to report on using the advanced filtering.

Additional Information

In order to see what Shavlik asset scan and inventory report should show you can run either command directly on a machine to get the output.

• Get-WmiObject win32_Product  | Select Name,Version,PackageName,Installdate,Vendor | Sort InstallDate -Descending| Export-Csv C:\installedapplications.csv
• wmic product get /format:list > C:\system_Software_%Computername%.txt

Affected Product(s)

Protect 9.x

Hello

I am unable to scan 2 servers , i always get error 201. I tried troubleshoot with all i got on the web without succes.

The ports are open, test existence/credential are ok, the firewall is ok, tried with different credentials and the issue is persistent. I can acces c$ on both machines.

I also tried to add those 2 servers on another shavlik machine and the issue is exactly the same.

All the Scanning  Prerequisites looks ok to me

Any ideas ? Thx

Purpose         

This document outlines how to cancel a scheduled task.

Steps

In Protect choose Manage> Scheduled Tasks.

For Deployments

Select the target machine in the tree on the left. Deployments are scheduled on the target machine.

For Scans

Select the Console machine in the tree on the left. All agent-less scans are stored in the Console's scheduler. This means that even if you are scanning a different target machine, you still select the Console machine from the tree.

When the intended machine has been selected, the Scheduled Jobs should automatically populate in the list on the right.

Right click the desired job, and choose Delete.

When prompted to confirm, choose Delete.

After the job is deleted the Scheduler for the selected machine should refresh, and the scheduled task should no longer be displayed.

Affected Product(s)     

Shavlik Protect 9.x

Hi,

i am unable to comment on my previous post, so i have to create a new one ?!

After MS released FREAK (MS15-031) patches, we suddenly see patches missing for BEAST (MS12-006)

Even after updating to the latest XML XMLRevisionDate="3/12/2015" XMLVersion="2.0.1.1508" we still see the behaviour, that MS12-006 and its superseding patches get detected as missing.

As the latest XML Update di not mention that there is a fix in the detection logic for this confirmed issue, we need to get an update on the status for this.

Steffen