RE: hfnetchk reporting

From: Eric (ews@tellurian.net)
Date: 07/30/02


Date: Mon, 29 Jul 2002 15:36:12 -0700
To: <jdavis96@msn.com>, "'Ingersoll, Jared'" <jared@cswv.com>, <focus-ms@securityfocus.com>
From: Eric <ews@tellurian.net>

HFNetChk checks the registry key (if present in the xml file, but it's not
been present for recent patches), checks the fileversion, and recomputes
and checks the checksum.

I recommend skipping the registry key checks altogether.

Use -z switch to disable registry checks.
Use -v for verbose to see why a patch was considered not found.
use -s 2 to suppress warning and not messages (I don't recommend this)

hfnetchk -v -z is the recommended syntax

In the case that was originally reported, it's most likely that one of the
snmp patch files on the person's system was not at the right level, or had
been regressed by some other software. Use the -v switch to see
why. Re-applying the patch should correct the problem.

At 02:15 PM 7/29/2002 -0700, John wrote:
>The issue that you are seeing has to deal with the way that Microsoft
>creates patches and hot fixes.
>
>HFNETCHK checks 3 things from what I know.
>1) File Version
>2) Check Sum
>3) Registry entry
>
>Many of the patches that you can apply do not have a registry entry that
>tells the system that it is installed. If you want to get around this
>you have to use an option with the tool
>
>Example:
>This will put it into verbose mode and skip checking the registry but
>will do the other 2 checks talked about earlier.
>
>Hfnetchk -v -s 2
>
>This worked for me and I heard that MS was supposed to be unifying this
>process so that this would not happen, but that was 3 months ago and it
>still has not happened. I guess MS likes to have egg on the face. ;)
>
>Regards,
>John



Relevant Pages

  • [Full-Disclosure] RE: Internet explorer 6 execution of arbitrary code (An analysis of the 180 Soluti
    ... And again each and every one of the method caching vulnerabilities liu and ... individuals, there I many many reasons why I dislike pivx, but I don't think ... registry patches nothing more, nothing less.. ... But ask yourself how seriously can you take a company that names 5 registry ...
    (Full-Disclosure)
  • Re: Office XP Unable to update...THE FIX
    ... >I looked high and low for the solution to "Office Update is unable to check ... > The fix requires editing the registry, ... > The secret to this fix is deleting all folders and contents call Patches ... Patches folder and Delete it and repeat for each ...
    (microsoft.public.officeupdate)
  • IE headers w patch level - new info
    ... The patch information that Internet Explorer displays ... reflect current patches applied to the client browser. ... logfiles, under the UserAgent field. ... I found this by searching my Registry for "T312461", ...
    (Focus-Microsoft)
  • Windows Installer -- PLEASE READ
    ... I get a "patch package could not be opened" error when I try to install ... update or upgrade inadvertantly corrupted my registry. ... PATCHES folders in the Registry and reinstalling Office 2003. ...
    (microsoft.public.windowsupdate)
  • Re: Office 2003 unable to update This Works!
    ... Review of my ... I backed up my registry (plus I set a restore ... Rename all folders called patches to patchesold ...
    (microsoft.public.officeupdate)