Detecting anti-virus on Windows with WMI - which namespace?

windows wmi antivirus antivirus-integration
dijjay picture dijjay · Oct 10, 2011 · Viewed 13.7k times · Source

I am coding a antivirus detection code and the WMI namespace differs in some cases as Win7 supports "\root\SecurityCenter2" and WinXP uses "\root\SecurityCenter".

Does anyone have a definitive list of namespaces Windows uses for anti-virus registration?

Thanks in advance..

Answer

RRUZ picture RRUZ · Oct 10, 2011

The class (AntiVirusProduct) which return information about the installed antivirus is not documented by Microsoft and only is supported in Windows Desktops editions (Windows XP, Windows Vista and Windows 7). Also depending of the Windows version the properties retrieved by the the this class can change.

Windows XP

Namespace : SecurityCenter

AntiVirusProduct-Properties

companyName
displayName
enableOnAccessUIMd5Hash
enableOnAccessUIParameters
instanceGuid
onAccessScanningEnabled
pathToEnableOnAccessUI
pathToUpdateUI
productUptoDate
updateUIMd5Hash
updateUIParameters
versionNumber

Windows Vista and Windows 7

Namespace : SecurityCenter2

displayName
instanceGuid
pathToSignedProductExe
pathToSignedReportingExe
productState

For more info you can read my article in this location Getting the installed Antivirus, AntiSpyware and Firewall software using Delphi and the WMI.

Related questions

Getting the Username from the HKEY_USERS values

Is there a way to connect between the values under HKEY_USERS to the actual username? I saw some similar questions, but most (if not all) talks about C# code, and my need is in VBScript.

Read More
WMI "installed" query different from add/remove programs list?

Trying to use WMI to obtain a list of installed programs for Windows XP. Using wmic, I tried: wmic /output:c:\ProgramList.txt product get name,version and I get a listing of many of the installed programs, but after …

Read More
How to connect to a remote Windows machine to execute commands using python?

I am new to Python and I am trying to make a script that connects to a remote windows machine and execute commands there and test ports connectivity. Here is the code that I am writing but it is not …

Read More