For the virus and spyware it uses just the three middle numbers 657 and 401. (of course you need to do the dword conversion.
I read something about newer and older products and the older products just using the middle three numbers, but we have the latest version of Officescan. It wouldn't be the only time products registries didn't reflect other upgrades. Jason Passow Mississippi Welders Supply [EMAIL PROTECTED] ph: (507) 494-5178 fax: (507) 454-8104 "If you do everything right, nobody will realize you've done anything at all." Dirk Bulinckx wrote: > In the registry is it in the same format as on the web? > (3.657.00 for Trend Micro virus pattern, 0.401.00 for Spyware pattern and > 10246 for Network Virus pattern file) > > > > Dirk Bulinckx. > -----Original Message----- > From: Servers Alive Discussion List [mailto:[EMAIL PROTECTED] On Behalf > Of Jason Passow > Sent: Tuesday, August 15, 2006 9:11 PM > To: Servers Alive Discussion List > Subject: Re: [SA-list] Anti-virus signature checker > > Trend Micro virus pattern > http://www.trendmicro.com/ftp/products/pattern/whatsnew.txt > HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc.\ > PatternVer > dword > > Spyware pattern > http://www.trendmicro.com/ftp/products/pattern/spyware/new-spy.txt > HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc.\ > PatternVer\SpyPatternVer > dword > > Network Virus pattern file > http://www.trendmicro.com/ftp/products/nvwpattern/nvp-new.txt > HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\PFW\CF > WPatternVer > Dword > > All I could find right now. > > Jason Passow > Mississippi Welders Supply > [EMAIL PROTECTED] > ph: (507) 494-5178 > fax: (507) 454-8104 > > "If you do everything right, nobody will realize you've done anything at > all." > > > > Dirk Bulinckx wrote: > >> download again....it's in it... >> >> >> Dirk Bulinckx. >> >> >> >> ---------------------------------------------------------------------- >> -- >> *From:* Servers Alive Discussion List [mailto:[EMAIL PROTECTED] *On >> Behalf Of *Julian Carr >> *Sent:* Tuesday, August 15, 2006 8:11 PM >> *To:* Servers Alive Discussion List >> *Subject:* Re: [SA-list] Anti-virus signature checker >> >> I think I spoke too soon. I don't see the Symantec checker listed. >> Only McAfee and Aladin. >> >> >>>>> [EMAIL PROTECTED] 08/15/06 02:05PM >>> >>>>> >> Neato torpedo! >> >> >>>>> [EMAIL PROTECTED] 08/15/06 12:50PM >>> >>>>> >> A while ago (June) there were some talks about a COM check that would >> see if your anti-virus product was up-to-date or not. >> >> We have a little COM check that is already able to do a little. >> * Aladin eSafe: >> get the version number from the internet (if they change the >> look of their website we have a problem) >> >> * Symantec AV: >> get the version number from the internet (if they change the >> look of their website we have a problem) >> >> >> * CA eTrust (both for the VET and the Innoculate engine) >> get the version number from a TXT file they have on the >> internet >> >> >> * McAfee (NAI) >> get the version number from an INI file they have on the >> internet >> compare that to the version that is in the registry of the >> system running SA. >> * versions are the same gives an up >> * versions are different gives a down >> * nothing in the registry give an up too >> >> All of them (except for CA eTrust which uses FTP) are using the HTTP >> protocol to get the info from the internet. This is via a direct >> connection (NO proxy support!) >> >> >> This is a FIRST version. We would like to extend the possibilities to >> more AV products (internet part) and also the local part (get the >> version numbers on the local system too). >> So if you have info on were we can find the info (internet & local) >> for a specific product, then please let us know so we can >> extend/enhance this check. >> >> >> You can download it from http://beta.woodstone.nu/soft/setup_avcom.exe >> >> >> >> Dirk Bulinckx. >> >> To unsubscribe send a message with UNSUBSCRIBE as subject to >> [email protected] >> If you use auto-responders (like out-of-the-office messages), then >> make sure that they are not send to the list nor to the individual >> members of the list that send a message. Doing this will get you >> removed from the list. >> >> >> >> To unsubscribe send a message with UNSUBSCRIBE as subject to >> [email protected] >> If you use auto-responders (like out-of-the-office messages), then >> make sure that they are not send to the list nor to the individual >> members of the list that send a message. Doing this will get you >> removed from the list. >> >> To unsubscribe send a message with UNSUBSCRIBE as subject to >> [email protected] >> If you use auto-responders (like out-of-the-office messages), then >> make sure that they are not send to the list nor to the individual >> members of the list that send a message. Doing this will get you >> removed from the list. >> >> To unsubscribe send a message with UNSUBSCRIBE as subject to >> [email protected] >> If you use auto-responders (like out-of-the-office messages), then >> make sure that they are not send to the list nor to the individual >> members of the list that send a message. Doing this will get you >> removed from the list. >> > > To unsubscribe send a message with UNSUBSCRIBE as subject to > [email protected] > If you use auto-responders (like out-of-the-office messages), then make sure > that they are not send to the list nor to the individual members of the list > that send a message. Doing this will get you removed from the list. > > To unsubscribe send a message with UNSUBSCRIBE as subject to > [email protected] > If you use auto-responders (like out-of-the-office messages), then make sure > that they are not send to the list nor to the individual members of the list > that send a message. Doing this will get you removed from the list. > > To unsubscribe send a message with UNSUBSCRIBE as subject to [email protected] If you use auto-responders (like out-of-the-office messages), then make sure that they are not send to the list nor to the individual members of the list that send a message. Doing this will get you removed from the list.
