Dsiplay Anti Virus infomation

[Pollak]

Is there a way to display the antivirus version of McAfee. I would like to see DatDate, DATVersion, EngineVersion and Version which I found in the registry and added to the registry scan of LAnsweeper, but see no waty to display this information.

Also it would be cool if I could display, based on the most current DatDate, which ones are not up to date. So if one computer reports 04/01/2009 as the current DAT version the rest that were out of date would be listed so.



Thanks,
Niles

[Hemoco]

Deleting of reports is currently not implemented (but you can remove them from the dashboard)

Could you post a screenshot of the screen where you inserted the registry keys please.

[Pollak]

I am trying to delete old Reports from ReportBuilder, but htere does not seem to be a way to do this.




Please advise,
Niles

[Pollak]

Okay I figured it out but it does not display the actual version.

[Pollak]

Great and thank you. Now where will I find this in Lansweeper?



Thanks,
Niles

[Hemoco]

This could be a sample query to check the "Engineversion"

SELECT     dbo.tblComputers.Computername, dbo.tblComputers.Domain, dbo.tblRegistry.Valuename, dbo.tblRegistry.Value
FROM         dbo.tblComputers LEFT OUTER JOIN
                      dbo.tblRegistry ON dbo.tblComputers.Computername = dbo.tblRegistry.Computername
WHERE     (dbo.tblRegistry.Valuename = 'EngineVersion')

[Pollak]

Here is what I added to Lansweeper under Scanned Registry Keys

HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\VIRUSCAN8600\DataVersion

HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\VIRUSCAN8600\DATversion

HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\VIRUSCAN8600\EngineVersion

HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\VIRUSCAN8600\Version

HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\VIRUSCAN8600\HotFixVersions





Here is the registry export


Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\VIRUSCAN8600]
"Product Name"="McAfee VirusScan Enterprise Workstation"
"Language"="0000"
"Plugin Path"="C:\\Program Files\\McAfee\\VirusScan Enterprise\\VsPlugin.dll"
"Software ID"="VIRUSCAN8600"
"Installs CMA"=dword:00000001
"CLSID"="{9BE8D8A1-2DB5-4A29-A95F-50C8B27820DA}"
"Uninstall Command"="msiexec /x {35C03C04-3F1F-42C2-A989-A757EE691F65} REMOVE=ALL REBOOT=R /q"
"Install Path"="C:\\Program Files\\McAfee\\VirusScan Enterprise\\"
"Version"="8.5.0.781"
"EngineInstallDate"="20081210140257"
"EngineVersion"="5300.2777"
"DatDate"="04082009"
"DatInstallDate"="20090408140212"
"DATVersion"="5578.0000"
"Plugin Flag"=dword:00000000
"HotFixVersions"="8"
"HotFixInstallDate"="20090319122502"
"HotFix7LangID"="0000"

[Hemoco]

Could you also post an extract from the registry of the client and what you added to the "scanned registry keys"

[Pollak]

Here is the SQL code from ReportBuilder.

SELECT
tblRegistry.Value,
tblComputers.Computername
FROM
tblComputers
INNER JOIN tblRegistry ON (tblComputers.Computername = tblRegistry.Value)
WHERE
tblComputers.Computername = tblRegistry.Value

[Hemoco]

Could you post a screenshot (and sql code) of what you have added so far?

[Pollak]

Sorry, but I do not have much knowledge on how to do this. I tried your suggestion, but I all get is a bunch of random registry keys and misc info.

I have four specfic values that I need to see against the computers. Under the follwing key there four Regvalues.

HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\VIRUSCAN8600

DateVersion
DATVersion
EngineVersion
Version


PLus is there a way to delete what I have created in the report builder?



PLease advise,
Niles