WMI Technical Product

Question

I am requesting WMI for "SELECT * FROM AntivirusProduct" in SecurityCenter2 (I am now on Windows 7).

It's hard for me to find what the numbers on productState mean , including AntiSpyware and Firewall. Is there any link for this? I want to make sure that I can get the correct product status on any Vista or 7 machine (in case these numbers vary from machine to machine).

Answer 1

There is no official documentation for the values productState. The only information I could find was this article , which made assumptions about the value of a value productStatebased on byte byte value analysis.

Answer 2

Values productStateappear to be bit-wide, which are not documented, except through the NDA with Microsoft. It should be possible to match the values ​​returned with the installed products and their status. You can install one AV product, record its status, and then delete its virus definitions, and then check how the value changes. There seems to be a limited set of typical values.

Link: https://bigfix.me/analysis/details/2998358

productState, 34 AV 10000 , :

(, , )

262144, 40000, 1000000000000000000

262160, 40010, 1000000000000010000

266240, 41000, 1000001000000000000

270336, 42000, 1000010000000000000

327680, 50000, 1010000000000000000

327696, 50010, 1010000000000010000

331776, 51000, 1010001000000000000

344064, 54000, 1010100000000000000

393216, 60000, 1100000000000000000

393232, 60010, 1100000000000010000

393472, 60100, 1100000000100000000

393488, 60110, 1100000000100010000

397312, 61000, 1100001000000000000

397328, 61010, 1100001000000010000

397568, 61100, 1100001000100000000

397584, 61110, 1100001000100010000

458752, 70000, 1110000000000000000

458768, 70010, 1110000000000010000

462848, 71000, 1110001000000000000

462864, 71010, 1110001000000010000