blob: a4e76731f0b67e77a859780009dc92d9157f16a9 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
|
Set objWMIService = GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\SecurityCenter2")
Set installedAntiviruses = objWMIService.ExecQuery("Select * from AntivirusProduct")
'Iterates through all the antivirus software,retrieved by the WMI query,present on the system and prints only the ones that are active
'this is done by checking the 12th bit of the productState property of the antivirus
'if 12th bit is on then it means that the antivirus is in active state
'if 12th bit is off then it is inactive.
'see http://neophob.com/2010/03/wmi-query-windows-securitycenter2/
count=0
list=""
For Each antivirus in installedAntiviruses
If antivirus.productState And &h01000 Then 'checking the state of the 12th bit of productState property of the antivirus
count=count+1
list=list & VBNewLine & VBtab & "*" & antivirus.displayName
End if
Next
If count = 0 Then
Wscript.StdOut.Write "NOT_FOUND"
Else Wscript.Echo list
End if
|
