TrendMicro Pattern Version

mdvacca

I've been trying to come up with a poller that will show the current virus pattern version in the registry.  Using that to alert if the version doesn't change after (possibly) 72 hours of polling.

I've managed to come up with a WMI registry poll but the value is not being displayed.  Any help would be appreciated.

 

const HKEY_CURRENT_USER = &H80000001
strComputer = "."
Set oReg=GetObject( _
   "winmgmts:{impersonationLevel=impersonate}!\\" &_
    strComputer & "\root\default:StdRegProv")
strKeyPath = "Misc."
strValueName = "PatternVer"
oReg.GetDWORDValue _
   HKEY_LOCAL_MACHINE,strKeyPath,strValueName,dwValue
WScript.Echo "Pattern Version: "  & dwValue

wscript.Echo "Statistic: 0"

qle

What is the format of the virus pattern version? If it's a number with a single decimal, you would want to pass it out of the script next to "Statistic:".

However, if it has any other characters except for digits or more than one dot, "Statistic:" won't accept it. Instead, it'll just display as zero. In that case, you can pass it out of the script using "Message:". It should then appear in the tooltip when you however of the orange info box. You can get an idea of this post.

However, in either case, I'm not sure how you would create an alert that triggers if the version remains the same for 72 hours.