Anti-virus check

[markstaylor]

I am glad to say I am finally using AMS6!!

I need to create an app as a logon script that will first verify if the users PC has certain criteria met. For example are they running an antivirus program? If not they cannot log onto the system or at least give them a warning message.

I know of some registry keys that I can search to find out if a system has Symantec anti-virus corp. But how can I check any users machine for the exsitance of any anti virus software and also if it is being used (active). Microsoft XP has the nifty little security feature that alerts the user if there is no anti virus or if it is disabled. Can this be used somehow?

Thanks

Mark

[Eagle]

Mark..with XPSP2 the antivirus detection is limited and if 'not notify'
setting is enabled..basically useless to you anyway..my 2 bob.

Yes it would be great if between us all we could compile a list of
proccesses that are running for at least the most common Antivirus proogies,
wether they are running in a disabled state, would be the real tricky bit,
I would imagine.

for Norton AV: these are the two common process names to look for,
using the system.enumerateproccesses action-s

NAVAPSVC.EXE
NAVAPW32.EXE --anitvirus detecion is running

HKLM\Software\...target antivirus product if installed

HKLM\Software\Microsoft\Windows\CurrentVersion\Run ..
an indication of what runs at logon...