From: "Geo" 

"waldo kitty"  wrote in message
news:Xns97B09EE4B12me42{at}216.144.1.254...

> [HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed
> Components\{2cc9d512-6db6-4f1c-8979-9a41fae88de0}]
> {at}="Q837009"
> "IsInstalled"=dword:00000001
> "Version"="6,0,2800,1409"
> "ComponentID"="Q837009"
>
>
> so, what does that tell us??

That says the patch is installed, removing it may possibly allow
reinstallation. It's hard to say because it's an older patch it may only be
checking for this registry entry. Some of the newer stuff looks for a text
file with the Q name in the system directory, some others look for the
actual files.

Shavlik hfnetchk program that I use for patching can do 3 types of scans,
one looks for stuff like the registry entry, second digs deeper and looks
for that and the Q file and probably a couple other signs, and the third is
called a deep scan and actually checks each patched file but takes a little
longer to run.

Geo.

--- BBBS/NT v4.01 Flag-5