"Julian" <> wrote in message
news:9332762D-ADC0-42B3-896F-
....
> I need to find out how to MANUALLY uninstall 917422... anyone have any ideas?
http://www.microsoft.com/technet/sec.../ms06-051.mspx
shows that kernel32.dll was replaced.
Find all instances of kernel32.dll.
Open a cmd window and enter
cd /d %windir%
and
dir/a/s kernel32*
Then do right-click Find (Up) 917422.
If you find it in C:\WINDOWS\$NtUninstallKB917422$ (for example)
I think you may be able to run its spuninst\spuninst.exe manually
otherwise you will have to improvise. Also check what spuninst.inf
might imply in any case. Hmm... the implication of spuninst.txt is
that you don't even have to rename kernel32.dll during a boot.
(FWIW I would have thought it would be "in-use" and that would prevent it
from being copied to replace it.) In that case except for all the accounting
details in the registry which would be unchanged (e.g via spuninst.inf)
it looks as if it would be sufficient just to copy an older version of it
into System32 and DllCache.
<example>
Directory of F:\WINDOWS\$NtUninstallKB917422$
2004-08-04 00:56 983,552 kernel32.dll
1 File(s) 983,552 bytes
Directory of F:\WINDOWS\ServicePackFiles\i386
2004-08-04 00:56 983,552 kernel32.dll
1 File(s) 983,552 bytes
F:\WINDOWS\$NtUninstallKB917422$\spuninst>type spuninst.txt
DEL "f:\windows\$hf_mig$\kb917422\sp2qfe\kernel32. dll"
COPY "F:\WINDOWS\$NtUninstallKB917422$\kernel32.dll " "f:\windows\system32\kernel32.dll"
COPY "F:\WINDOWS\$NtUninstallKB917422$\kernel32.dll " "f:\windows\system32\dllcache\kernel32.dll"
COPY "F:\WINDOWS\$NtUninstallKB917422$\spuninst\spunins t.txt" "F:\WINDOWS\$NtUninstallKB917422$\spuninst\spunins t.tag"
</example>
Good luck
Robert Aldwinckle
---