OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Colin Stefani (cstefanitideworks.com)
Date: Wed Jun 06 2001 - 16:00:06 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Hi All,
     
    This is more of an interesting point, but I was asked by a client to figure
    what files were being changed by different hot fixes from Microsoft. I have
    seen some discussion on this list before regarding this so I thought it
    would be relevant to others. I noticed in the registry that the "filelist"
    is provided under the hotfix entry. So in the case where you're looking to
    find this out, here's where you'd go to look:
     
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows 2000\ <SP#>\
     
    Or
     
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix
     
    Under those keys is the patch id (e.g. q12345) and under that is a sub-key
    called simply "filelist" with sub-key values starting at zero and going up
    from there for every file installed by the patch. Fairly useful and
    interesting information.
     
    Cheers,
     
    -cs-