In the registry is it in the same format as on the web? (3.657.00 for Trend Micro virus pattern, 0.401.00 for Spyware pattern and 10246 for Network Virus pattern file)
Dirk Bulinckx. -----Original Message----- From: Servers Alive Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Jason Passow Sent: Tuesday, August 15, 2006 9:11 PM To: Servers Alive Discussion List Subject: Re: [SA-list] Anti-virus signature checker Trend Micro virus pattern http://www.trendmicro.com/ftp/products/pattern/whatsnew.txt HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc.\ PatternVer dword Spyware pattern http://www.trendmicro.com/ftp/products/pattern/spyware/new-spy.txt HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc.\ PatternVer\SpyPatternVer dword Network Virus pattern file http://www.trendmicro.com/ftp/products/nvwpattern/nvp-new.txt HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\PFW\CF WPatternVer Dword All I could find right now. Jason Passow Mississippi Welders Supply [EMAIL PROTECTED] ph: (507) 494-5178 fax: (507) 454-8104 "If you do everything right, nobody will realize you've done anything at all." Dirk Bulinckx wrote: > download again....it's in it... > > > Dirk Bulinckx. > > > > ---------------------------------------------------------------------- > -- > *From:* Servers Alive Discussion List [mailto:[EMAIL PROTECTED] *On > Behalf Of *Julian Carr > *Sent:* Tuesday, August 15, 2006 8:11 PM > *To:* Servers Alive Discussion List > *Subject:* Re: [SA-list] Anti-virus signature checker > > I think I spoke too soon. I don't see the Symantec checker listed. > Only McAfee and Aladin. > > >>> [EMAIL PROTECTED] 08/15/06 02:05PM >>> > Neato torpedo! > > >>> [EMAIL PROTECTED] 08/15/06 12:50PM >>> > A while ago (June) there were some talks about a COM check that would > see if your anti-virus product was up-to-date or not. > > We have a little COM check that is already able to do a little. > * Aladin eSafe: > get the version number from the internet (if they change the > look of their website we have a problem) > > * Symantec AV: > get the version number from the internet (if they change the > look of their website we have a problem) > > > * CA eTrust (both for the VET and the Innoculate engine) > get the version number from a TXT file they have on the > internet > > > * McAfee (NAI) > get the version number from an INI file they have on the > internet > compare that to the version that is in the registry of the > system running SA. > * versions are the same gives an up > * versions are different gives a down > * nothing in the registry give an up too > > All of them (except for CA eTrust which uses FTP) are using the HTTP > protocol to get the info from the internet. This is via a direct > connection (NO proxy support!) > > > This is a FIRST version. We would like to extend the possibilities to > more AV products (internet part) and also the local part (get the > version numbers on the local system too). > So if you have info on were we can find the info (internet & local) > for a specific product, then please let us know so we can > extend/enhance this check. > > > You can download it from http://beta.woodstone.nu/soft/setup_avcom.exe > > > > Dirk Bulinckx. > > To unsubscribe send a message with UNSUBSCRIBE as subject to > [email protected] > If you use auto-responders (like out-of-the-office messages), then > make sure that they are not send to the list nor to the individual > members of the list that send a message. Doing this will get you > removed from the list. > > > > To unsubscribe send a message with UNSUBSCRIBE as subject to > [email protected] > If you use auto-responders (like out-of-the-office messages), then > make sure that they are not send to the list nor to the individual > members of the list that send a message. Doing this will get you > removed from the list. > > To unsubscribe send a message with UNSUBSCRIBE as subject to > [email protected] > If you use auto-responders (like out-of-the-office messages), then > make sure that they are not send to the list nor to the individual > members of the list that send a message. Doing this will get you > removed from the list. > > To unsubscribe send a message with UNSUBSCRIBE as subject to > [email protected] > If you use auto-responders (like out-of-the-office messages), then > make sure that they are not send to the list nor to the individual > members of the list that send a message. Doing this will get you > removed from the list. To unsubscribe send a message with UNSUBSCRIBE as subject to [email protected] If you use auto-responders (like out-of-the-office messages), then make sure that they are not send to the list nor to the individual members of the list that send a message. Doing this will get you removed from the list. To unsubscribe send a message with UNSUBSCRIBE as subject to [email protected] If you use auto-responders (like out-of-the-office messages), then make sure that they are not send to the list nor to the individual members of the list that send a message. Doing this will get you removed from the list.
