IIRC, McAfee cycles their update not thru registry but through the version of
the DATDET.MCS file. I no longer have any installs of this product but worked
with GFI to make LANGuard better at detecting updates of this product (tho I
cannot confirm if this happened since we switched to NOD32 partway through this
process).
As for Norton you can try looking at HKLM\Software\Symantec\SharedDefs for the
"DefWatch" or "DefAlert" values, depending on your version, to see if they
correlate to anything. I don't have this product either so I can't promise this
will help but it seems to be where LANGuard looks for version info.
Samuel Mason CISSP, GCFA
-----Original Message-----
From: listbounce@securityfocus.com [mailto:listbounce@securityfocus.com] On
Behalf Of Abhinav
Sent: Sunday, February 24, 2008 6:55 PM
To: jfvanmeter@comcast.net
Cc: security-basics@securityfocus.com
Subject: Re: Mcafee and Norton Anti Virus definition version
This is for a test lab where I dont have access to nessus. I am
looking to write my own tool which can give me this information.
-Abhinav
On Sun, Feb 24, 2008 at 10:57 AM, <jfvanmeter@comcast.net> wrote:
I believe Nessus has a plug in to let you know that the virus scan is out of
date and tells you the version number.
--John
-------------- Original message ----------------------
From: Abhinav <kabhinav@gmail.com>
> Hello List
> I am trying to programmitically find out the virus definition version
> of the anti -virus software installed. The two anit-virus we use in
> our company are from Norton and Mcafee.
> Is there a registry key/or windows api/WMI call that I can use which
> can provide me this information?
>
> Thanks
> -Abhinav
