Antivirus Detection

[jserrano336]

Lots of new security products are coming out that offer multiple security services. I think it would be a good move for Lansweeper to get away from detecting AV products by looking for product names in the Add/Remove software list.

My company is using a suite that has AV feature in it but only the main product name is listed in Add/Remove. However, all of the security features do not have to be installed so detecting the main product's name is not an indicator of AV being installed. AS a matter of fact, the AV feature is only used on a few machines currently as we roll over to the product.

I am in a situation that the out-of-the-box report can not detect the AV product on the selected machines which are running the AV feature. All machines on my network run the suite for app and device control so the main product's name is on all machines under the Add/Remove list. As you can see I am in trouble because pushing out the AV feature does not add an entry to Add/Remove and all the machines with the AV feature can not be identified in the out-of-the-box report.

My feature request would be that Lansweeper move to polling WMI for the existence of an entry in the instances of AntivirusProduct. In the Security or Security2 WMI namespace AntivirusProduct will list a GUID for all antivrus products on the machine. If this could be done you wouldn;t even have to maintain an av product list. So long as there is one GUID listed in the query the machine can be counted as having av installed on it.

Use wbemtest and connect to root\SecurityCenter2 (on Windows 7) to enumerate the instance - superclassname, AntivirusProduct. This would be a great add if you asked me.

Thanks for considering it.

[Hemoco]

Hi, this will be covered in Lansweeper version 5.1. This will be released in the next few months. No release date yet though.