I remember seeing one, once, somewhere, but I seem to have lost it. There are also a few scanners out there that check for vulnerabilities: there are patches for XP, Office, and a few others, and even when Windows Update says you are fine, you may not be. I can't find any of it now, but I'll let you know if I do. Well, given that Windows Update only checks by looking at the Updates registry key, it'd be very easy to fake a successful install. That's why I want to actually test the fixes by looking at testcases.