Display Anti-Virus Information In A Site

[roberts126]

I'm a network admin for several small companies. I have 13 servers that I have to verify that backups ran, that the anti-virus application is running and updating, and check the event viewers every day. What I'd like to accomplish is displaying this information in an ASP site.

I already have the code in place from a Visual Basic Application that I wrote to display the event viewer information, as well as alerting me via email when there is a severe error such as a disk error. I also have a general idea about how to display recent backup history since backup exec uses MSDE to store this information.

My problem is obtaining the information from Symantec Anti-Virus Corporate Edition. I'd like for the site to display the version number, date of last update, and the date of the last scan. Is this possible if so where do I need to look to accomplish this. I would think that the information would be stored in WMI somewhere but I'm not that familiar with WMI.

Any help would be greatly appreciated.

[roberts126]

I have it figured out. Symantec Anti-Virus stores this information in HKEY_LM\SOFTWARE\Intel\LANDesk\VirusProtect6\Current Version. There are three binary registry entries for PatternFileDate, TimeOfLastScan, and TimeOfLastVirus respectively.

The PatternFileDate Binary value is setup as something like 26 01 01 00 00 00 00 00
The first number as far as I can tell is the number of years beyond 1970. 26 in hex is 38 in decimal so 1970 = 2008.

The second number is the month. This is a zero based number so 00 = Jan, 01 = Feb, etc.

The third number is the date. 01 = 1, 02 =2, etc as it is not zero based.

The TimeOfLastScan is setup similar to the PatternFileDate with some extra information. It would have a value of something like 26 01 01 06 1E 0A 00 00. The first three numbers are exactly like the PatternFileDate while the fourth number is the Hour, the fifth is the Minute, and the sixth is the Seconds.

Hope this information is of help to someone if they want to do something similar.

I should have checked the registry but had my blinders on.