There is already an enhancement request open with Cisco it is bug CSCtz53149.
Here is thier recomendation for a custom check: custom rule to check for MSE 4.x, using the following data: Registry Key: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Security Client\ Value Name: DisplayVersion Value DataType: String Operator: starts with Value Data: 4
