Last Update date in Registry

Discussion in 'ESET NOD32 Antivirus' started by jaymehta, Jun 18, 2008.

Thread Status:
Not open for further replies.
  1. jaymehta

    jaymehta Registered Member

    Jun 18, 2008

    I want to know how to identify the last update date of the ESET NOD32 AV.
    I can see the settings in registry - LastUpdate and LastUpdateAttempt (Both REG_DWORD) at location HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000400\Settings. But i dont know what to make out of this information. The value at both the DWORD is 0xffffffff(4294967295). Please somebody help me to identify the value from this.

    Or else if anybody know from where i can get the last update date then please let me know on how do i find it also.

    Thanks in advance.

    Last edited: Jun 18, 2008
  2. Bubba

    Bubba Updates Team

    Apr 15, 2002
    That 4294967295 hex value translates to Sunday, February 07, 2106 12:28:15 AM, which means you are pretty well covered for any malware that comes down the pike :eek:

    In all seriousness, you should be able to view the last update date via the Setup tab, as shown in the below location. As for your registry date entries, those are default install entries related to a hex clock and your Setup should show it hasn't been updated. My Last Succesful Update entry shown below(Wednesday, June 18, 2008 7:15:26 AM) translates to Hex of 4858fc5e

  3. edwin3333

    edwin3333 Registered Member

    Aug 29, 2007
    If you are like me you have over 500 machines to keep track of. And we know that you never get 100% of your machines reporting up to the RA server 100% of the time. There's always that guy that screwed with his DNS settings, or host table, or something that prevents him from showing up & also from getting updates.

    And if you are like me, you audit all your PC's to find these situations.

    I have a workstation agent which has many methods behind it to get it into my SQL server. (Local push, push by IP, remote pull, etc.)

    In the agent I query;
    HKEY_LOCAL_MACHINE\SOFTWARE\Eset\ESET Security\CurrentVersion\Info[ScannerVersion]

    Which gives me;
    3196 (2008061:cool:

    which I store in an SQL database.

    I can do a "select AVversion, lastscandate from versions order by AVversion"

    And immediately see who is not updating nor talking. Key is that they store the date in that area.
Thread Status:
Not open for further replies.