From 940b4d1848e8c70ab7642901a68594e8016caffc Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Sat, 27 Apr 2024 18:51:28 +0200 Subject: Adding upstream version 1:7.0.4. Signed-off-by: Daniel Baumann --- antivirusDetection.vbs | 25 +++++++++++++++++++++++++ 1 file changed, 25 insertions(+) create mode 100755 antivirusDetection.vbs (limited to 'antivirusDetection.vbs') diff --git a/antivirusDetection.vbs b/antivirusDetection.vbs new file mode 100755 index 000000000..ad22e2673 --- /dev/null +++ b/antivirusDetection.vbs @@ -0,0 +1,25 @@ +On Error Resume Next +Set objWMIService = GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\SecurityCenter2") +If objWMIService is Nothing Then + Wscript.StdOut.Write "NULL" +Else + Set installedAntiviruses = objWMIService.ExecQuery("Select * from AntivirusProduct") +'Iterates through all the antivirus software,retrieved by the WMI query,present on the system and prints only the ones that are active +'this is done by checking the 12th bit of the productState property of the antivirus +'if 12th bit is on then it means that the antivirus is in active state +'if 12th bit is off then it is inactive. +'see http://neophob.com/2010/03/wmi-query-windows-securitycenter2/ + count=0 + list="" + For Each antivirus in installedAntiviruses + If antivirus.productState And &h01000 Then 'checking the state of the 12th bit of productState property of the antivirus + count=count+1 + list=list & VBNewLine & VBtab & "*" & antivirus.displayName + End if + Next + If count = 0 Then + Wscript.StdOut.Write "NOT_FOUND" + Else + Wscript.Echo list + End if +End if \ No newline at end of file -- cgit v1.2.3