N-central Help

AV Status service

The AV Status service provides consolidated management of antivirus applications. The service reports the following information for antivirus software:

  • product name,
  • scanning status,
  • current status of updates, and
  • version information.

To add the AV Status service to a device, you must run the AV Security script available in the SolarWinds MSP Resource Center.

Service Type WMI
Instances on a Device 1
Supported Systems/Applications Windows XP, Windows Vista
Device Class Laptop - Windows, Server - Windows, Workstation - Windows
Monitored By Windows probe, Windows agent
Service Description This service uses the root\SecurityCenter WMI class on a Windows XP/Vista workstation to establish the Antivirus Product name, Scanning status, Up-to-date status, and Version number.
Scan Interval (Minutes) 15 minutes (default), 60 minutes (maximum)

Properties queried and calculations performed

Namespace root\SecurityCenter
WMI Class AntiVirusProduct
WMI Property 0 DisplayName
WMI Property 1 onAccessScanningEnabled
WMI Property 2 productUptoDate
WMI Property 3 versionNumber

Status details

Status Detail Description
Antivirus Product Name The monitored antivirus software. It normally includes both the vendor name and the product name.
Virus Scanning Enabled Indicates whether the antivirus software is currently actively scanning or disabled.
Antivirus Product UptoDate Indicates whether the virus dictionary being used by the antivirus software is current or outdated.
Version Number The release identifier of the monitored antivirus software.