Tedd,
Thanks for posting this item. The fix is to be sure you have the absolute
latest of all files needed for offline scans, not just the latest
WSUSSCN2.CAB file (which is the offline catalog). You also need
WUREDIST.CAB (to confirm the Microsoft files are genuine), the MUAUTH.CAB
(which authenticates MBSA through the WUA client) and all of the potentially
required WUA Standalone Installers.
These files need to be placed in the specific MBSA directories as detailed
in the MBSA FAQ (http://technet.microsoft.com/en-us/security/cc184922.aspx)
under, "MBSA uses files that it downloads from the Internet, but the
computer I want to use to scan my network doesn't have Internet access. How
can I use MBSA in an offline and secure environment?"
I hope that helps...

Signature
--
Doug Neal [MSFT]
dugn@online.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no rights.
If newsgroup discussion with experts and MVPs is unable to solve a problem
to your satisfaction, feel free to contact PSS for support on the Microsoft
Baseline Security Analyzer (MBSA). Information is available at the following
link:
http://support.microsoft.com/default.aspx
This e-mail address does not receive e-mail, but is used for newsgroup
postings only.
> Need help using this product, all i get is a "The catalog file is damaged
> or
> an invalid catalog."
>
> Thinking offline is the way to go since we use a proxy and we are not in
> controll of the firewall.
Bill Sanderson - 15 Aug 2008 00:18 GMT
Doug - I've not read that documentation yet, so I don't know where these
files are found, but I wonder whether it might be possible to package them
or otherwise make them available through a link at the security portal--
www.microsoft.com\security\portal ?
It's true that this is generally oriented towards non-IT professionals, but
it is a useful place to go to find current definitions for Microsoft
anti-malware tools to use in an offline environment.
> Tedd,
>
[quoted text clipped - 20 lines]
>> Thinking offline is the way to go since we use a proxy and we are not in
>> controll of the firewall.