Lansweeper 3.5 Beta

[Srnet]

I raised a problem with the Lansweeper 3.5 beta, its returning null values from some registry keys.

I have some reg files of examples, as requested, but I can post them since the 3.5 beta forum hs now gone premium user only.

[Srnet]

What I have not been able to try, and I now wont be able to next week, is to see if the erroneous null returns are consistent in the same machine., i.e. does the null entry happen every time the particular machine runs lsclient.

Fortunately the Lansweeper Server is a Vmware Server image and its fairly easy to swap between versions.

[Hemoco]

Srnet wrote:
What I have not been able to try, and I now wont be able to next week, is to see if the erroneous null returns are consistent in the same machine., i.e. does the null entry happen every time the particular machine runs lsclient.

Fortunately the Lansweeper Server is a Vmware Server image and its fairly easy to swap between versions.

To make it scan every time set the waittime for "REGISTRY" to 0

[Srnet]

They are REG_SZ.

If you cut the text I posted, such as;


Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\VirusScan Enterprise\CurrentVersion]
"szVirDefVer"="5549"
"szVirDefDate"="10 March 2009"



into an empty text file and rename it .reg, that should produce a reg file you can import.


One thing I did notice is that with version 3.5 if a reg key is not present on a machine, then a entry is made in the database for that key but with a null value. With 3.2 if the key was not present there was no entry made in the database ?

[Hemoco]

Srnet wrote:

One thing I did notice is that with version 3.5 if a reg key is not present on a machine, then a entry is made in the database for that key but with a null value. With 3.2 if the key was not present there was no entry made in the database ?

We changed this so now you are sure that scanning occurs. (because an entry is made)

[Hemoco]

Could you please export them as a .reg file so I can import and test them.
Please also take a look at the data type for these fields (REG_SZ, REG_EXPAND, ...)

[Srnet]

I have a scan setup which picks up the contents of szVirDefVer and szVirDefDate, this is the detail of the versions of the Mcafee Virus scanner.

In some cases (about 30%) szVirDefDate returns null, but szVirDefVer always return the value.

Below are three extracts from reg files, I have cut out the main body of the keys. The first two are where the szVirDefDate returned as null, the last is where szVirDefDate returns the correct value, I cant spot the differance.


Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\VirusScan Enterprise\CurrentVersion]
"szVirDefVer"="5549"
"szVirDefDate"="10 March 2009"


Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\VirusScan Enterprise\CurrentVersion]
"szVirDefVer"="5549"
"szVirDefDate"="10 March 2009"


Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\VirusScan Enterprise\CurrentVersion]
"szVirDefVer"="5549"
"szVirDefDate"="10 March 2009"


This morning I reverted my scanner server back to 3.2, its a Vmware server image, and there are no nulls being returned.

[Hemoco]

Could you please post them here. (or send them by e-mail)
The beta 3.5 forum has been deleted to avoid confusion with the final release.