Running wsusou under XP and sigcheck 2.3: strange log notes

[throwawayaccount]

Hello,

10.7.3

I tried downloading win7 patches under XP, so I first get an error because sigcheck cannot run.

So I grab sigcheck 2.3 that works, and replace the downloaded one with it in bin.

However now the script tries to delete filenames fetched from sigcheck "how to run" default output text:

Code: Select all

la 20.08.2016 18:12:49,57 - Info: Downloaded/validated most recent Windows Update catalog file
la 20.08.2016 18:12:49,57 - Warning: Deleted unsigned file usage: ..\bin\sigcheck.exe [-d][-c|-ct] <file or directory>
la 20.08.2016 18:12:49,57 - Warning: Deleted unsigned file usage: ..\bin\sigcheck.exe [-t[u]] <certificate store name|*>
la 20.08.2016 18:12:49,57 - Warning: Deleted unsigned file   -a      Show extended version information. The entropy measure reported
la 20.08.2016 18:12:49,57 - Warning: Deleted unsigned file           is the bits per byte of information of the file's contents.
la 20.08.2016 18:12:49,57 - Warning: Deleted unsigned file   -c      CSV output with comma delimiter
la 20.08.2016 18:12:49,57 - Warning: Deleted unsigned file   -ct     CSV output with tab delimiter
la 20.08.2016 18:12:49,57 - Warning: Deleted unsigned file   -d      Dump contents of a catalog file
la 20.08.2016 18:12:49,57 - Warning: Deleted unsigned file   -e      Scan executable images only (regardless of their extension)
la 20.08.2016 18:12:49,57 - Warning: Deleted unsigned file   -f      Look for signature in the specified catalog file
la 20.08.2016 18:12:49,57 - Warning: Deleted unsigned file   -h      Show file hashes
la 20.08.2016 18:12:49,57 - Warning: Deleted unsigned file   -i      Show catalog name and image signers
la 20.08.2016 18:12:49,57 - Warning: Deleted unsigned file   -l      Traverse symbolic links and directory junctions
la 20.08.2016 18:12:49,57 - Warning: Deleted unsigned file   -m      Dump manifest
la 20.08.2016 18:12:49,57 - Warning: Deleted unsigned file   -n      Only show file version number
la 20.08.2016 18:12:49,57 - Warning: Deleted unsigned file   -q      Quiet (no banner)
la 20.08.2016 18:12:49,57 - Warning: Deleted unsigned file   -r      Disable check for certificate revocation
la 20.08.2016 18:12:49,57 - Warning: Deleted unsigned file   -s      Recurse subdirectories
la 20.08.2016 18:12:49,57 - Warning: Deleted unsigned file   -t[u]   Dump contents of specified certificate store ('*' for all stores).
la 20.08.2016 18:12:49,57 - Warning: Deleted unsigned file           Specify -tu to query the user store (machine store is the default).
la 20.08.2016 18:12:49,57 - Warning: Deleted unsigned file   -u      If VirusTotal check is enabled
la 20.08.2016 18:12:49,57 - Warning: Deleted unsigned file           by VirusTotal or have non-zero detection
la 20.08.2016 18:12:49,57 - Warning: Deleted unsigned file           unsigned files.
la 20.08.2016 18:12:49,57 - Warning: Deleted unsigned file   -v[rs]  Query VirusTotal (www.virustotal.com) for malware based on file hash.
la 20.08.2016 18:12:49,57 - Warning: Deleted unsigned file           Add 'r' to open reports for files with non-zero detection. Files
la 20.08.2016 18:12:49,57 - Warning: Deleted unsigned file           reported as not previously scanned will be uploaded to VirusTotal
la 20.08.2016 18:12:49,57 - Warning: Deleted unsigned file           if the 's' option is specified. Note scan results may not be
la 20.08.2016 18:12:49,57 - Warning: Deleted unsigned file           available for five or more minutes.
la 20.08.2016 18:12:49,57 - Warning: Deleted unsigned file   -vt     Before using VirusTotal features
la 20.08.2016 18:12:49,57 - Warning: Deleted unsigned file           VirusTotal terms of service. See:
la 20.08.2016 18:12:49,57 - Warning: Deleted unsigned file           https://www.virustotal.com/en/about/terms-of-service/
la 20.08.2016 18:12:49,57 - Warning: Deleted unsigned file           If you haven't accepted the terms and you omit this
la 20.08.2016 18:12:49,57 - Warning: Deleted unsigned file           option
la 20.08.2016 18:12:49,75 - Info: Verified digital file signatures of Windows Update catalog file
la 20.08.2016 18:12:52,43 - Info: Created integrity database for Windows Update catalog file


So at this point I cancelled the operation because I'm not sure if it operates as intended.

I assume this behaviour is not standard. How to fix?

[aker]

No it is not intended.
Please do the following:
Open .\cmd\DownloadUpdates.cmd in an editor.
Find the line

Code: Select all

:SkipSigChkOpts

Insert these two lines before:

Code: Select all

echo SIGCHK_COPT=%SIGCHK_COPT%
pause


Then run wsusou again until it halts at that point.
Then post the last part of .\log\download.log and the last lines of the cmd-content here.

[throwawayaccount]

cmd:

Code: Select all

Server file no newer than local file `../bin/mkisofs.exe' -- not retrieving.

SIGCHK_COPT=/accepteula -q -c -nobanner


log:

Code: Select all

la 20.08.2016 20:47:19,87 - Info: Starting WSUS Offline Update download (v. 10.7.3) for w61-x64 glb
la 20.08.2016 20:47:19,87 - Info: Option /includedotnet detected
la 20.08.2016 20:47:19,89 - Info: Option /verify detected
la 20.08.2016 20:47:19,90 - Info: Option /exitonerror detected
la 20.08.2016 20:47:19,96 - Info: Set time zone to LOC-3:00
la 20.08.2016 20:47:20,81 - Info: Updated static download and update definitions
la 20.08.2016 20:47:20,95 - Info: Downloaded/validated mkisofs tool


I will remove -nobanner from the script and try again. In command line that breaks it, so removal will probably fix it. Thanks for your time.

[aker]

Please also search forma line similar to "found sigcheck.exe version x.x" and post the version number here.

[throwawayaccount]

I didn't notice such a line anywhere. The version of the exe I used is 2.3. But removing -nobanner allowed me to complete the download part without errors.

[harry]

I didn't notice such a line anywhere.

The sigcheck version number is not logged anymore since WSUSOU 10.0.1 [see trac].