Last Update date in Registry

Hi,

I want to know how to identify the last update date of the ESET NOD32 AV.
I can see the settings in registry - LastUpdate and LastUpdateAttempt (Both REG_DWORD) at location HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000400\Settings. But i dont know what to make out of this information. The value at both the DWORD is 0xffffffff(4294967295). Please somebody help me to identify the value from this.

Or else if anybody know from where i can get the last update date then please let me know on how do i find it also.

Thanks in advance.

Regards,
Jay

 

That 4294967295 hex value translates to Sunday, February 07, 2106 12:28:15 AM, which means you are pretty well covered for any malware that comes down the pike

In all seriousness, you should be able to view the last update date via the Setup tab, as shown in the below location. As for your registry date entries, those are default install entries related to a hex clock and your Setup should show it hasn't been updated. My Last Succesful Update entry shown below(Wednesday, June 18, 2008 7:15:26 AM) translates to Hex of 4858fc5e

 

If you are like me you have over 500 machines to keep track of. And we know that you never get 100% of your machines reporting up to the RA server 100% of the time. There's always that guy that screwed with his DNS settings, or host table, or something that prevents him from showing up & also from getting updates.

And if you are like me, you audit all your PC's to find these situations.

I have a workstation agent which has many methods behind it to get it into my SQL server. (Local push, push by IP, remote pull, etc.)

In the agent I query;
HKEY_LOCAL_MACHINE\SOFTWARE\Eset\ESET Security\CurrentVersion\Info[ScannerVersion]

Which gives me;
3196 (2008061

which I store in an SQL database.

I can do a "select AVversion, lastscandate from versions order by AVversion"

And immediately see who is not updating nor talking. Key is that they store the date in that area.