RE: Mcafee and Norton Anti Virus definition version

["Mason, Samuel" <SMason () mt gov>]

IIRC, McAfee cycles their update not thru registry but through the version of the DATDET.MCS file. I no longer have any 
installs of this product but worked with GFI to make LANGuard better at detecting updates of this product (tho I cannot 
confirm if this happened since we switched to NOD32 partway through this process).

As for Norton you can try looking at HKLM\Software\Symantec\SharedDefs for the "DefWatch" or "DefAlert" values, 
depending on your version, to see if they correlate to anything. I don't have this product either so I can't promise 
this will help but it seems to be where LANGuard looks for version info.

Samuel Mason CISSP, GCFA

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On Behalf Of Abhinav
Sent: Sunday, February 24, 2008 6:55 PM
To: jfvanmeter () comcast net
Cc: security-basics () securityfocus com
Subject: Re: Mcafee and Norton Anti Virus definition version

This is for a test lab where I dont have access to nessus. I am
looking to write my own tool which can give me this information.

-Abhinav

On Sun, Feb 24, 2008 at 10:57 AM,  <jfvanmeter () comcast net> wrote:
> I believe Nessus has  a plug in to let you know that the virus scan is out of date and tells you the version number.
>
>  --John
>   -------------- Original message ----------------------
>  From: Abhinav <kabhinav () gmail com>
>  > Hello List
>  > I  am trying to programmitically find out the virus definition version
>  > of the anti -virus software installed. The two anit-virus we use in
>  > our company are from Norton and Mcafee.
>  > Is there a registry key/or windows api/WMI call that I can use which
>  > can provide me this information?
>  >
>  > Thanks
>  > -Abhinav