Kaseya Community

How to create a procedure to identify whether the DAT Mcafee antivirus is outdated more than 15 days and open a ticket?

  • How to create a procedure to identify whether the DAT Mcafee antivirus is outdated more than 15 days and open a ticket?
     Could help me solve this issue?
    I am committed to automate some checks.

    Tks.

  • To use on workstations with Windows 7.

    Tks.

  • An alternative would be the WMI values stored in Security Center (Workstation only!);

     

     

    Security Center (Windows XP)

     

    Antivirus Display Name

    root\SecurityCenter:AntiVirusProduct[1].displayName

    Antivirus State Code

    root\SecurityCenter:AntiVirusProduct[1].productUptoDate

     

    Antivirus  Definitions  is  Current

    -1

    Antivirus  Definitions are  Outdated

    0

     

    Security Center2 (Windows Vista / 7)

     

    Antivirus Display Name

    root\SecurityCenter2:AntiVirusProduct[1].displayName

    Antivirus State Code

    root\SecurityCenter2:AntiVirusProduct[1].productState

     

    Use the display name to ID what AV is installed and the productState value for what state the AV is in;

     

    262144

    Antivirus Current -  (On-Access Scanner OFF)

    262160

    Antivirus Outdated -  (On Access Scanner OFF)

    266240

    Antivirus Current -  (On Access Scanner ON)

    266256

    Antivirus Outdated -  (On Access Scanner ON)

    393216

    Antivirus Current -   (On-Access Scanner OFF)

    393232

    Antivirus Outdated - (On Access Scanner OFF)

    393488

    Antivirus Outdated - (On Access Scanner OFF)

    397312

    Antivirus Current -  (On Access Scanner ON)

    397328

    Antivirus Outdated - (On Access Scanner ON)

    397584

    Antivirus Outdated - (On Access Scanner ON)

  • you should read the .dat file content (HEX) and convert is to decimal with vbscript.

    the scripts are somewhere on the forum.