This is the queries we currently use to determine if machines do not have any Symantec Anti-Virus installed. Since ther is a problem with the x64 bit machines not reporting installed software correctly I added a check against what procesess are also running just to make sure we did not miss anything.
This is setup as a view called web30repNoSymantec:
SELECT DISTINCT TOP 100 PERCENT dbo.tblComputers.Computername AS Computer, dbo.tblOperatingsystem.Description, dbo.tblOperatingsystem.Caption, dbo.tblComputers.Domain
FROM dbo.tblComputers INNER JOIN
dbo.tblComputersystem ON dbo.tblComputers.Computername = dbo.tblComputersystem.Computername INNER JOIN
dbo.TsysLastscan ON dbo.tblComputers.Computername = dbo.TsysLastscan.Computername LEFT OUTER JOIN
dbo.tblOperatingsystem ON dbo.tblComputers.Computername = dbo.tblOperatingsystem.Computername LEFT OUTER JOIN
dbo.tblSoftware ON dbo.tblComputers.Computername = dbo.tblSoftware.ComputerName LEFT OUTER JOIN
dbo.tblProcesses ON dbo.tblComputers.Computername = dbo.tblProcesses.Computername
WHERE (dbo.tblComputers.Computername IN
(SELECT Computername
FROM dbo.TsysLastscan AS TsysLastscan_1
WHERE (CFGname = 'Software')))
AND (dbo.tblComputers.Computername NOT IN
(SELECT ComputerName
FROM dbo.tblSoftware AS tblSoftware_1
WHERE (softwareName LIKE 'Symantec% Endpoint Protection')
OR (softwareName LIKE 'Symantec% AntiVirus')
OR (softwareName LIKE 'Symantec Client Security')))
AND (dbo.tblComputers.Computername NOT IN
(SELECT Computername
FROM dbo.tblProcesses AS tblprocesses_1
WHERE (Caption LIKE 'smc.exe') OR (Caption LIKE 'rtvscan.exe')))
ORDER BY dbo.tblComputers.Computername