Endpoint Protection

 View Only

  • 1.  Registry Key or Log File of Last Full Scan

    Posted Jun 13, 2012 05:13 PM

    Hi All,

     

    I'm working on a stand alone vbscript to run serverside to give me certain stats about the servers I've got running SEP 11.

    Currently it pulls product version, virus definitions, agent status, ntp status, and scan date.

     

    My problem is, it is pulling any scan, not the last full scan date. I am not concerned with the date of a DefWatch(daily) or QuickScan(manual). Only when the last  "Full Scan" was.

     

    Is there anywhere in the registry or a log file created that could give me this information. For 03 & 08 servers.

     

     

    TIA.

     



  • 2.  RE: Registry Key or Log File of Last Full Scan

    Posted Jun 13, 2012 08:38 PM

    Try this:

    Monitors > Logs > Scan logs > Advanced Settings >

    duration greater than or equal to x seconds (600 = 10 minutes, only scheduled scans will typically last longer than that)

    OR

    files scanned greater than or equal to x files (2500 is typical for a quick scan, you dont see many systems with less than 20,000 files on a full scan.)

     



  • 3.  RE: Registry Key or Log File of Last Full Scan

    Trusted Advisor
    Posted Jun 14, 2012 03:13 AM

    Hello,

    Here are the Registry Keys..

    HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\AV\TimeOfLastScan

    Also check this Article: 

    How to decode the TimeOfLastVirus and TimeOfLastScan registry values

    http://www.symantec.com/docs/TECH99873

    Hope that helps!!