Using Hyena to scan McAfee Dat levels

[Guest]

I'm running Heyna 5.2. Is there a quick way to determine the DAT level?

Thanks

[kstanush]

Re: Using Hyena to scan McAfee Dat levels

I'm not sure what that is. How do you determine this now ? Does McAfee have a WMI class that can report this information ?

[Guest]

Re: Using Hyena to scan McAfee Dat levels

The DAT file level is related to the files that contain virus information. I don't know if there is a WMI are not....

[kstanush]

Re: Using Hyena to scan McAfee Dat levels

Hyena does not have any control over application-specific functionality like this, but there are only a couple of ways to do this that I can think of:

- If there is a registry setting, like "DatVersion", then you could write a simple registry export for Exporter Pro (part of Hyena) to extract this setting. This would be the easiest way.

- If there was a published WMI class for this, you could simply write WMI query using Exporter Pro (now in beta) to export the WMI "DatVersion" property setting.

- Or, I think that WMI has a File class where you can use it to scan for a file on multiple computers and get the version of the file remotely. I think.

[Guest]

Re: Using Hyena to scan McAfee Dat levels

The dat file version on my machine can be found in the following key:-

HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\VIRUSCAN7100\DATVersion

If you are not using epo then I am sure you can find it if you search for DATVersion in regedit.

[Guest]

Re: Using Hyena to scan McAfee Dat levels

I've used this for months as a tool:

cmd.exe /x /c \\[computer]\C$\tools\reg.exe query "HKLM\Software\Network Associates\TVD\shared components\virusscan engine\4.0.xx" \\%E% & pause

1. reg.exe is from aone of the resource kits
2. [computer]is the name of the computer you've stored reg.exe on

[Guest]

Re: Using Hyena to scan McAfee Dat levels

"If there is a registry setting, like "DatVersion", then you could write a simple registry export for Exporter Pro (part of Hyena) to extract this setting. This would be the easiest way."


How do I do this?

Thanks

[cmccullough]

Re: Using Hyena to scan McAfee Dat levels

In Exporter Pro, in the configuration properties there is a Registry tab. You can look at the registry export templates to get an idea of how they are setup, then create a new one pointing to the key you are searching for.

When you run this you'll end up with a delimited text file that you can open with Excel for further sorting and reporting.