Endpoint Protection

Hi all,

I have Symantec Antivirus Corporate Edition 10 installed on Windows 2008 on 64 bit.

I have a small problem. Need to read from the registry the last date when it was performed a full computer scan.

I know that on 32 bit I can take it from here:

HKEY_LOCAL_MACHINE\\SOFTWARE\\INTEL\\LANDesk\\VirusProtect6\\CurrentVersion value of TimeOfLastScan .

On Windows on 64 bit here is a small change in registry paths :

HKEY_LOCAL_MACHINE\\SOFTWARE\\INTEL\\LANDesk\\VirusProtect6\\CurrentVersion but here I cannot find TimeOfLastScan.

Can somebody tell me what is the path from where I can find the last scan date? Did the registry name changed , I mean it is not longer named TimeOfLastScan ?

--Regards,

Bogdan

HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\smc_engine_status 

If the value of  smc_engine_status  is "0" that means NTP is Disabled

If the value of  smc_engine_status  is "1" that means NTP is Enabled

I think this is what you are looking for

http://www.symantec.com/business/support/index?page=content&id=TECH99873

It should be here, HKEY_LOCAL_MACHINE\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion