This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Patch agent False positive (Access Runtime)

Hello,

Sophos patch agent is reporting "MS 2460049 (French) Office 2010 Service Pack 1" patch as missing in some systems in our LAN.

In these workstations/servers, only ACCESS 2010 Runtime is installed. I run Microsoft Update and it doesn't report any missing patch.
I run the PatchChecker tool and it only finds files and reg keys related to ACCESS Runtime.

Below is a snip from the log file:

 02/18/13  10:27:24|TID:       4128|ID:          0|File:                     Patch.cpp|Line: 333|Evidence: Info Msg: Filename : [C:\Program Files\Sophos\Sophos Patch Agent\Assess\MS 2460049 (French) Office 2010 Service Pack 1.pls]
 02/18/13  10:27:24|TID:       4128|ID:          0|File:                     Patch.cpp|Line: 333|Evidence: Info Msg: OS Platform   : [Microsoft Windows Server 2008 R2 Standard x64]
 02/18/13  10:27:24|TID:       4128|ID:          0|File:                     Patch.cpp|Line: 333|Evidence: Info Msg: Library Build : [5.2.2][Nov 18 2011 16:00:20]
...
 02/18/13  10:27:25|TID:       4128|ID:          0|File:                     Patch.cpp|Line: 333|Evidence: Info Msg:  File [C:\Program Files (x86)\Microsoft Office\Office14\MSOHEV.DLL]
 02/18/13  10:27:25|TID:       4128|ID:          0|File:                     Patch.cpp|Line: 333|Evidence: Info Msg:   File Version Found: [14.0.4730.1010], Check Against: >= [14]
 02/18/13  10:27:25|TID:       4128|ID:          0|File:                     Patch.cpp|Line: 333|Evidence: Info Msg:    File Version information within specified range
...
 02/18/13  10:27:25|TID:       4128|ID:          0|File:                     Patch.cpp|Line: 333|Evidence: Info Msg:  File [C:\Program Files (x86)\Microsoft Office\Office14\MSACCESS.EXE]
 02/18/13  10:27:25|TID:       4128|ID:          0|File:                     Patch.cpp|Line: 333|Evidence: Info Msg:   File Version Found: [14.0.6024.1000], Check Against: >= [14]
 02/18/13  10:27:25|TID:       4128|ID:          0|File:                     Patch.cpp|Line: 333|Evidence: Info Msg:    File Version information within specified range
 02/18/13  10:27:25|TID:       4128|ID:          0|File:                     Patch.cpp|Line: 333|Evidence: Info Msg:  File [C:\Program Files (x86)\Microsoft Office\Office14\MSACCESS.EXE]
 02/18/13  10:27:25|TID:       4128|ID:          0|File:                     Patch.cpp|Line: 333|Evidence: Info Msg:   File Version Found: [14.0.6024.1000], Check Against: <= [15]
 02/18/13  10:27:25|TID:       4128|ID:          0|File:                     Patch.cpp|Line: 333|Evidence: Info Msg:    File Version information within specified range
...
 02/18/13  10:27:25|TID:       4128|ID:          0|File:                     Patch.cpp|Line: 333|Evidence: Info Msg:  Looking In: [HKEY_LOCAL_MACHINE][SOFTWARE\Wow6432Node\Microsoft\Office\14.0\Common\LanguageResources]
 WOW64: ON
 02/18/13  10:27:25|TID:       4128|ID:          0|File:                     Patch.cpp|Line: 333|Evidence: Info Msg:   Value [SKULanguage] was found
 02/18/13  10:27:25|TID:       4128|ID:          0|File:                     Patch.cpp|Line: 333|Evidence: Info Msg:    Data Found: [1036], Check Against: [1036]
 02/18/13  10:27:25|TID:       4128|ID:          0|File:                     Patch.cpp|Line: 333|Evidence: Info Msg:     Data matched
 02/18/13  10:27:25|TID:       4128|ID:          0|File:                     Patch.cpp|Line: 333|Evidence: Info Msg:  Running Script Fingerprint: [Detect Office 2010 SP1 x86 On 64Bit is Patched]
 02/18/13  10:27:27|TID:       4128|ID:          0|File:                     Patch.cpp|Line: 333|Evidence: Info Msg:   Script returned [0]
...
 02/18/13  10:27:27|TID:       4128|ID:          0|File:                     Patch.cpp|Line: 333|Evidence: Info Msg:  File [C:\Program Files (x86)\Microsoft Office\Office14\MSOHEV.DLL]
 02/18/13  10:27:27|TID:       4128|ID:          0|File:                     Patch.cpp|Line: 333|Evidence: Info Msg:   File Version Found: [14.0.4730.1010], Check Against: >= [14]
 02/18/13  10:27:27|TID:       4128|ID:          0|File:                     Patch.cpp|Line: 333|Evidence: Info Msg:    File Version information within specified range
...
 02/18/13  10:27:27|TID:       4128|ID:          0|File:                     Patch.cpp|Line: 333|Evidence: Info Msg:  File [C:\Program Files (x86)\Microsoft Office\Office14\MSACCESS.EXE]
 02/18/13  10:27:27|TID:       4128|ID:          0|File:                     Patch.cpp|Line: 333|Evidence: Info Msg:   File Version Found: [14.0.6024.1000], Check Against: >= [14]
 02/18/13  10:27:27|TID:       4128|ID:          0|File:                     Patch.cpp|Line: 333|Evidence: Info Msg:    File Version information within specified range
 02/18/13  10:27:27|TID:       4128|ID:          0|File:                     Patch.cpp|Line: 333|Evidence: Info Msg:  File [C:\Program Files (x86)\Microsoft Office\Office14\MSACCESS.EXE]
 02/18/13  10:27:27|TID:       4128|ID:          0|File:                     Patch.cpp|Line: 333|Evidence: Info Msg:   File Version Found: [14.0.6024.1000], Check Against: <= [15]
 02/18/13  10:27:27|TID:       4128|ID:          0|File:                     Patch.cpp|Line: 333|Evidence: Info Msg:    File Version information within specified range
...
 02/18/13  10:27:27|TID:       4128|ID:          0|File:                     Patch.cpp|Line: 333|Evidence: Info Msg:  Looking In: [HKEY_LOCAL_MACHINE][SOFTWARE\Wow6432Node\Microsoft\Office\14.0\Common\LanguageResources]
 WOW64: ON
 02/18/13  10:27:27|TID:       4128|ID:          0|File:                     Patch.cpp|Line: 333|Evidence: Info Msg:   Value [SKULanguage] was found
 02/18/13  10:27:27|TID:       4128|ID:          0|File:                     Patch.cpp|Line: 333|Evidence: Info Msg:    Data Found: [1036], Check Against: [1036]
 02/18/13  10:27:27|TID:       4128|ID:          0|File:                     Patch.cpp|Line: 333|Evidence: Info Msg:     Data matched
 02/18/13  10:27:27|TID:       4128|ID:          0|File:                     Patch.cpp|Line: 333|Evidence: Info Msg:  Running Script Fingerprint: [Detect Office 2010 SP1 x86 On 64Bit is Patched]
 02/18/13  10:27:29|TID:       4128|ID:          0|File:                     Patch.cpp|Line: 333|Evidence: Info Msg:   Script returned [0]

Is there a way to fix this behavior??

Regards.
SIBTEL

:37709


This thread was automatically locked due to age.
Parents Reply Children
No Data