Quantcast
Channel: Forums - Recent Threads
Viewing all articles
Browse latest Browse all 30534

Re: KAV and KB2823324

$
0
0

Detection script below. The trick with this one is to create a view that watches for when this script FAILS; so you run this against all of the windows 7 machines, and bam, you've got your list of PCs that have the patch still.

<?xml version="1.0" encoding="utf-8"?>
<ScriptExport xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="http://www.kaseya.com/vsa/2008/12/Scripting">
  <Procedure name="KB2823324 Detection" treePres="3" id="1327572085" folderId="32119231541794396193144183">
    <Body description="">
      <Statement description="Attempts to return results of a shell command to a global variable '#global:cmdresults#'" name="Execute Shell Command - Get Results to Variable" continueOnFail="false">
        <Parameter xsi:type="StringParameter" name="Parameter1" value="wmic qfe | find &quot;2823324&quot;" />
        <Parameter xsi:type="StringParameter" name="Parameter2" value="false" />
        <Parameter xsi:type="StringParameter" name="Parameter3" value="System" />
      </Statement>
      <Statement description="Write an Entry into the Procedure Log" name="WriteScriptLogEntry" continueOnFail="false">
        <Parameter xsi:type="StringParameter" name="Comment" value="KB2823324 Status: '#global:cmdresults#'" />
      </Statement>
      <If description="">
        <Condition name="CheckVariable">
          <Parameter xsi:type="StringParameter" name="VariableName" value="#global:cmdresults#" />
          <Parameter xsi:type="EnumParameter" name="Condition" value="Contains" />
          <Parameter xsi:type="StringParameter" name="Value" value="2823324" />
        </Condition>
        <Then>
          <Statement description="Execute the specified file - full path to file required." name="ExecuteFile" continueOnFail="false">
            <Parameter xsi:type="StringParameter" name="Path" value="PATCH DETECTED, FAIL SCRIPT" />
            <Parameter xsi:type="StringParameter" name="Arguments" value="" />
            <Parameter xsi:type="EnumParameter" name="ExecuteAccount" value="System" />
            <Parameter xsi:type="BooleanParameter" name="WaitComplete" value="False" />
          </Statement>
        </Then>
      </If>
    </Body>
  </Procedure>
</ScriptExport>


Viewing all articles
Browse latest Browse all 30534

Trending Articles