Antivirus program detection

[Tom]

I would like to find out, if an Antivirus program (e.g. McAfee, FProt, etc.)
is running actively on a Windows PC - in order to display a message in case
there is no AV protection or the AV protection has been disabled. I tried
EICAR.com, but I don't want to frighten users with a "false" Virus alarm. I
also would like some kind of standard test that works with most of the AV
software - and not having to find an individual solution for each and every
available AV program. - Anybody knows how to to this using VB or C ?

Thanks!

[Frederic Bonroy]

Tom wrote:

> I would like to find out, if an Antivirus program (e.g. McAfee, FProt, etc.)
> is running actively on a Windows PC - in order to display a message in case
> there is no AV protection or the AV protection has been disabled.

There is no virus scanner running actively on my computer. It scans
only when I ask it to - am I not protected? Oh yes, I am. :-)

> I tried
> EICAR.com, but I don't want to frighten users with a "false" Virus alarm. I
> also would like some kind of standard test that works with most of the AV
> software - and not having to find an individual solution for each and every
> available AV program. - Anybody knows how to to this using VB or C ?

Try searching for the main executable file of the different virus
scanners. That will not tell you whether the scanner is active, but
then see above.

[Tom]

"Frederic Bonroy" <yor...@yahoo.fr> wrote in message
news:3C0762AB...@yahoo.fr...

> There is no virus scanner running actively on my computer. It scans
> only when I ask it to - am I not protected? Oh yes, I am. :-)

As far as experienced PC users are concerned I agree.

Problem is I am dealing with a heterogeneous network of thousands of PCs
(and at least 50% computer dummies) - so the only chance of reducing Virus
outbreaks is at least to warn users when they have no AV scanner running
actively on their PC. This check should automatically be done when people
install a corporate standard software...

[C'est moi]

A gal I work with got hit with CIH when it was going around. She was a
newbie to computers and I asked her about virus software. Yes, I do have
McAfee. It came with the computer. Oh, I'm supposed to *run* the
program? Oh, I'm supposed to *update* the program???

Wouldn't you think that this basic information should be in the "quick
start" guide of *every* new computer (thinking of the "boxed sets" that
people buy in dept and computer stores).

"Tom" <trm...@gmx.at> wrote in
news:3c079ce5$0$7922$5039...@newsreader01.highway.telekom.at:
<snip>

[Wormhole]

"oh, I supposed to read the quickstart?"

"C'est moi" <NOSPAM...@excite.com> wrote in message
news:Xns91694F3B5BEA6Ta...@209.142.136.250...

[Wessel]

"Tom" <trm...@gmx.at> wrote in message
news:3c079ce5$0$7922$5039...@newsreader01.highway.telekom.at...

That is an insane situation, suppose you get hit by nimda? It is a
administrators nightmare and involves closing the network. With such a big
network your company is at huge risk and could lose a lot of money.
You apparently know better than this and you should really try to get acros
to management how big the risk is.
I work at a company with a network with some thousand pc's.
Most people have no admin rights, they cannot install things and their virus
software is updated from distance by scripting and installing special
software on every client so a admin can do updates or check for illegal
software. Occasionally they do that to keep track of licenses.
Allso they keep every client updated with security patches, plus they filter
out executable attachments on the exchange server.

So far no outbreak of a virus after loveletter.

See a security newsgroup, they can tell what software you need in order to
protect your network.

regards Wessel