Hi all, welcome back,

As we read in Windows Security Center – Managing the State of Security, the vast majority of antivirus Independent Software Vendors (ISVs) support WMI integration. Windows Security Center uses it to detect antivirus and firewall solutions.

The following script shows how to get some information from those solutions:

strComputer = "."

Set oWMI = GetObject( _

  "winmgmts:{impersonationLevel=impersonate}!\\" & strComputer & "\root\SecurityCenter")
Set colItems = oWMI.ExecQuery("Select * from AntiVirusProduct")
For Each objItem in colItems

  With objItem

    WScript.Echo .companyName

    WScript.Echo .displayName

    WScript.Echo .instanceGuid

    WScript.Echo .onAccessScanningEnabled

    WScript.Echo .pathToSignedProductExe

    WScript.Echo .productHasNotifiedUser

    WScript.Echo .productState

    WScript.Echo .productUptoDate

    WScript.Echo .productWantsWscNotifications

    WScript.Echo .versionNumber

  End With

Next

Cheers,

Alex (Alejandro Campos Magencio)