About knowing which antivirus installed in a computer

Question

1.00/5 (2 votes)

See more:

I am checking for antivirus name and version installed on my computer,although i have anti virus installed it is showing as "no av found"!!.
Whether i need to change name to my antivirus name or we have to give "name as %antivirus% " only???

What I have tried:

$avSoftware = get-wmiobject -class "Win32_Product" -namespace "root\cimv2" `
-computername "." -filter "Name like '%antivirus%'"

if ($avSoftware.Count -gt 0) {
foreach ($av in $avSoftware) {
write-host $p.Name $p.Version
}
} else {
write-host "No AV software found"
}

Posted 16-May-17 18:02pm

Member 13007431

Updated 16-May-17 22:49pm

Richard MacCutchan

v3

Add a Solution

Comments

Richard MacCutchan 17-May-17 4:57am

This will only work if the AV products contain either of those strings in their name. So products such as McAfee, Norton Security, Windows Defender, Kaspersky etc., will never be found.

1 solution

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Jochen Arndt · Answer 1 · 2017-05-16T21:41:00

Solution 1

You are searching for product names containing "antivirus". So you will not find software that does not contain that string. You might even find software that is not an AV software.

If you still want to use the Name property you have to search for strings that are used by the common AV products. I don't know these but some might for example contain "AV" instead:

SQL

Name LIKE '%antivirus%' OR Name LIKE '%AV%'

But AV products will register itself with Windows and can be queried from the Windows Security Center. See Security Center API[^] and Windows Security Center: Fooling WMI Consumers | OPSWAT Blog[^].

[EDIT]
Some useful links:
Auditing 32-Bit and 64-Bit Applications with PowerShell | Scripting content from Windows IT Pro[^]
Use PowerShell to Find Installed Software – Hey, Scripting Guy! Blog[^]
[/EDIT]

Posted 16-May-17 21:41pm

Jochen Arndt

Updated 17-May-17 0:13am

v2

Comments

Member 13007431 17-May-17 4:24am

without using that name property also i am not getting, i have antivirus installed on my machine, please tell me how i can print my antivirus name and version

Jochen Arndt 17-May-17 4:32am

I don't know which product you have installed. If it is not shown with the alternative method from my solution it is probably not registering itself.

Open the list of installed software in the control panel and check the name of your AV product. Then you can add a search term to get it listed.

If that does not help too you can try to check the list of services because AV software is usually running as a service.

Member 13007431 17-May-17 4:27am

and also i cant see the security option in control panel

Jochen Arndt 17-May-17 4:35am

?The links contain shell scripts to get the information. There is no need to open the control panel.

Member 13007431 17-May-17 4:44am

trend micro office client i am using

Jochen Arndt 17-May-17 4:48am

Is that the product name ("Trend Micro Office")?
Well, it does not contain "antivirus".

So you might try

Name LIKE '%antivirus%' OR Name LIKE '%Trend Micro Office'<pre>

Member 13007431 17-May-17 5:55am

Thank you for your reply sir..

But i am not getting the information below code i have used..

$avSoftware =get-wmiobject -class "Win32_Product" -namespace "root\cimv2" -computername "." -filter "Name Like '%Trend Micro Office%'"

if ($avSoftware.Count -gt 0) {
foreach ($av in $avSoftware) {
write-host $p.Name $p.Version
}
} else {
write-host "No AV software found"
}

when i see in installed software it showed me that Trend Micro Office

Jochen Arndt 17-May-17 6:16am

I have not installed that and can't test it therefore.

I have updated my solution with two links which may be helpful. Note also that using Win32_Product includes a consistency check check of installed software making the query very slow.

As already noted AV software might run as service. So you might also try

-class "Win32_Service"

Member 13007431 17-May-17 8:04am

thank you sir