Endpoint Protection

 View Only
Back to Library

Know Current Definition date from Registry 

Oct 28, 2009 09:39 PM

Registry Location

For SEP
HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\AV
 
For SAV
HKEY_LOCAL_MACHINE\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion

On the Key you can find two Values  
PatternFileDate  : Current Definition date
PatternFileRevision : Revision

These are Hexadecimal values
Example:
PatternFileDate  : 27090e - 2009 Oct 14 
27090e - YYMMDD Format
27 - 2009
27 Hex is 39 Decimal, this value is since 1970. So 1970+39 = 2009

09 is October (00- Jan, 0B - Dec)

0e Hex - 14 in decimal

PatternFileRevision : 16Hex - 22
16 HEX is 22 in Decimal 
Hope this helps :)

Statistics
0 Favorited
1 Views
0 Files
0 Shares
0 Downloads

Tags and Keywords

Comments

Migration User
Sep 28, 2010 05:05 AM

good information

Related Entries and Links

No Related Resource entered.