I know some of you are probably doing this. Hoping for some help. I'm trying to pull some data from our SAV parent server (10.1.7). The data for each client is kept in the registry on the parent, here:
HKEY_LOCAL_MACHINE\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\Cli ents\ServerName_::_244ADBEC4186D091E2A320B30CF515FC The value I'm having issues with is PatternFileDate. On the Parent it's stored as REG_DWORD. On the clients it's REG_BINARY. I have a calculation to convert it from REG_BInARY but it doesn't look like that's how it's stored on the Parent. For example, everything I've read indicates the value is the amount of time from 1970 to Now, and you need to convert that into a date. Well the HEX and Decimal values don't correspond to that on the Parent server. I've got values like this: 0x0000381c Or 0x0000380d And if I convert those, it's nowhere near what the value should be. I'm thinking it's stored differently, and I can't find any documentation on what that is. Thank you, Chris Bodnar, MCSE Sr. Systems Engineer Distributed Systems Service Delivery - Intel Services Guardian Life Insurance Company of America Email: [email protected] Phone: 610-807-6459 Fax: 610-807-6003 ----------------------------------------- This message, and any attachments to it, may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are notified that any use, dissemination, distribution, copying, or communication of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately by return e-mail and delete the message and any attachments. Thank you. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
