Radimus
(KiX Supporter)
2003-01-02 06:46 PM
McAfee Manager

what do you think??

 -


Les
(KiX Master)
2003-01-02 07:01 PM
Re: McAfee Manager

The PC Names are blurry. [Big Grin]
My NAV CE gives me that and more out of the box.

What would EPO give you?


Radimus
(KiX Supporter)
2003-01-02 07:02 PM
Re: McAfee Manager

a bill [Big Grin] [Big Grin]

[ 02. January 2003, 19:02: Message edited by: Radimus ]


rclarke
(Starting to like KiXtart)
2003-01-02 07:06 PM
Re: McAfee Manager

Hi Rad,

This is intriguing because I wrote something very very similar nearly a year ago using KiXGUI. I then rewrote it more recently using KiXforms. The question I have for you is how do you execute the McAfee sdat updater on the remote machine. I resorted to shelling out to a third party utility called "atonce". Have you managed to do this using pure COM?

Kind regards,

Rod.


Radimus
(KiX Supporter)
2003-01-02 07:11 PM
Re: McAfee Manager

push the sdat and/or xdat to the client PC and RmtExec() it

see:

http://www.kixtart.org/board/ultimatebb.php?ubb=get_topic;f=2;t=004070


Kdyer
(KiX Supporter)
2003-01-02 07:18 PM
Re: McAfee Manager

Rad,

Good Stuff..

Can you put in Exclusions of files/folders from scanning like that of ePO?

Thanks,

Kent


Will Hetrick
(Hey THIS is FUN)
2003-01-02 08:44 PM
Re: McAfee Manager

Very nice Rad. Does it find the new Virusscan Enterprise 7.0?

Radimus
(KiX Supporter)
2003-01-02 09:20 PM
Re: McAfee Manager

I dunno.. haven't tried
I'm sure they changed it enough that it doesn't

Exclusions can be done, as it basically just executes the command line scanner. It would just require another form to pop up so those options can be entered.


Diane
(Fresh Scripter)
2003-01-03 08:01 PM
Re: McAfee Manager

How much for it in zip format? [Big Grin]

Radimus
(KiX Supporter)
2003-01-03 08:51 PM
Re: McAfee Manager

I have the latest build at:

http://www.wheelerfam.com/Documents/McAfeeManager.kix

I need to link it on my kixtart page, but you can get it from the above link

It is still a bit of a work in progress, but all the functions work.

You need to provide the engine only superdat, and the DAT only superdat... from McAfee's Downloads

If you look closely, you'll see a remarkable resemblance to Shawn's Phone.kix [Big Grin]

[ 03. January 2003, 20:53: Message edited by: Radimus ]


Diane
(Fresh Scripter)
2003-01-03 09:44 PM
Re: McAfee Manager

Thanks, i'll take a look [Wink]

Kdyer
(KiX Supporter)
2003-01-03 10:08 PM
Re: McAfee Manager

Rad,

Can't you parse off the engine version like Paul does here?

Automating Virus Protection with KiXtart Scripts

Thanks!

Kent


Radimus
(KiX Supporter)
2003-01-04 01:53 AM
Re: McAfee Manager

what do you mean??

Do you mean using the real superdat?? The problem with that is that you cannot tell what engine is inside. the engine.exe files are named for their version, just like the dat files are.

The current engine is 4.1.60, but the last superdat I dl'ed was sdat4185... the numbers didn't match

[ 04. January 2003, 02:14: Message edited by: Radimus ]


NTDOCAdministrator
(KiX Master)
2003-01-04 02:04 AM
Re: McAfee Manager

Les,

Maybe I'll check into writing a script that can REPAIR a corrupted NAV which the console can't fix. That would be cool


Kdyer
(KiX Supporter)
2003-01-04 04:26 AM
Re: McAfee Manager

Rad,

Maybe I am wrong, but why wouldn't this work?
code:
; Get the present SuperDAT filename
$sDATString=DIR ($appsPATH + "SuperDAT\sdat*.exe")

; Parse the SuperDAT string for the version number
$sDATVer=SUBSTR($sDATString,5,4)

$VS45DATValue = READVALUE($RegPath + "Network Associates\TVD\Shared Components\VirusScan Engine\4.0.xx","szDatVersion")
$VS45DATNum = SUBSTR($VS45DATValue,5,4)

IF VAL($sDATVer) > VAL($VS45DATNum) ; if the SuperDAT is not up-to-date
GOTO "SuperDAT"
ELSE
...

Thanks,

Kent

[ 04. January 2003, 04:29: Message edited by: kdyer ]


Radimus
(KiX Supporter)
2003-01-04 03:43 PM
Re: McAfee Manager

I looked at it some more...

My initial problem was that our network never pulled Superdats unless it contained an engine update. So I was wrong there.

However, since a eng+dat superdat is almost 4.5 mb, and a dat-only superdat is 1.7 mb, it is more efficient/faster to use the dat only version.

Eng-only dats are available(about 3mb), but as the engine is rarely changed, every few months usually, those could be pushed when/where necessary.

I've updated my Kixtart page with links to this file (and Inquisitor)


rclarke
(Starting to like KiXtart)
2003-01-04 05:40 PM
Re: McAfee Manager

Hi Rad,

Would you mind if we posted your code at the KiXforms Script Archive, and if not, would it be better to wait until you have developed it to your satisfaction.

Rod.


Radimus
(KiX Supporter)
2003-01-04 08:12 PM
Re: McAfee Manager

If you would like to, be my guest... especially as I 'borrowed' most of the form code from Shawn's Phone.kix [Big Grin]

If you would however, put a footnote link to my page for any updates, that should be sufficient.

The code pretty much works as advertised, but I am running on a 2k network, and I haven't tested any other OS's or versions of McAfee. Let the buyer beware [Smile]

There are a few tweaks I'd like to do to it:
like auto selection after a check
perhaps make the status bar at the bottom a little bigger and enable scroll
possibly print a report
I'd also like to rework the Function Update_Click() to make it more effifcient
perhaps save the last location of the dats, so it wouldn't have to be browsed to every time...

Any suggestions are certainly welcome

[ 04. January 2003, 20:16: Message edited by: Radimus ]


Jose
(Seasoned Scripter)
2003-01-06 06:02 PM
Re: McAfee Manager

Nice page Radimus congratulations !! [Wink]
I tried to download Inquisitor.kix but I get error in page.
It could be very useful for me to answer some Kixforms questions I have, is it available?
Thanks very much again [Razz]


Radimus
(KiX Supporter)
2003-01-06 06:06 PM
Re: McAfee Manager

dammit... I'll have to fix the links on the page.

it is here:
http://www.wheelerfam.com/Documents/Inquisitor.kix

Kixfors is available at: http://www.kixforms.org/

[ 06. January 2003, 18:07: Message edited by: Radimus ]


Jose
(Seasoned Scripter)
2003-01-06 06:13 PM
Re: McAfee Manager

Check out McAfeeManager.kix link too.
Thanks for the file my friend !! [Big Grin]


ShawnAdministrator
(KiX Supporter)
2003-01-06 06:18 PM
Re: McAfee Manager

rad - do you have a rouge variable in your script inquisitor script there ? think its falling over on $txtUsername being undefined ?

Radimus
(KiX Supporter)
2003-01-06 06:23 PM
Re: McAfee Manager

I just uploaded the most current versions of Inquisitor and McAfeeManager to the website.

Radimus
(KiX Supporter)
2003-01-10 12:50 AM
Re: McAfee Manager

another update.. a fairly substantial one

And it does handle VirusScan 7... no changes from 4.5.1


NTDOCAdministrator
(KiX Master)
2003-01-10 02:42 AM
Re: McAfee Manager

Hey Rad... just a reminder. Still would be nice if you would put a date, time, version, changes entry at the top of your files on your website. Then anyone that came to see, or use them would know when they were last updated.

Radimus
(KiX Supporter)
2003-01-10 03:34 AM
Re: McAfee Manager

Yea, but then I'd have to edit the html page everytime I posted a new version...

BTW, there is another update I just completed, and it is pretty well feature complete.

The only thing is is really missing is some UI enhancements that will be available when Shawn releases the next version of kixforms to the general public and a fair amount of error handling... I have a bit of optimistic code in there now.

New update at 21:47 EST


Radimus
(KiX Supporter)
2003-01-12 05:33 AM
Re: McAfee Manager

latest update... requires kixforms 2.20

basically adds toolbuttons and combobox list width


Radimus
(KiX Supporter)
2003-01-13 04:04 PM
Re: McAfee Manager

Another minor update to the form... tightened the code a bit, etc.

I'm pretty much done with this.

Those of you waiting for a final product, can use this version... unless someone finds a show stopper.


Radimus
(KiX Supporter)
2003-01-13 05:00 PM
Re: McAfee Manager

BTW... I just used this to push the 4242xdat.exe out.

took almost 3 minutes to do update the 70 PCs on my LAN segment


LASAD
(Getting the hang of it)
2003-01-14 06:13 AM
Re: McAfee Manager

RAD,

How about non AD domains (NT4.0) how can we apply it ?.

TIA
SAM


Radimus
(KiX Supporter)
2003-01-14 02:34 PM
Re: McAfee Manager

replace the EnumOU() function with EnumDHCP()

But you will need to hardcode in you DHCP servers and subnets...


Will Hetrick
(Hey THIS is FUN)
2003-01-14 04:20 PM
Re: McAfee Manager

LASAD,
Here are a few changes that can make the Mcafee Manager available with The NT4 Domain model

1. Add the NetView UDF
2. Change this Code
code:
$ou = EnumOUs($ldap, 'computer')
For Each $item in Split($ou,"|")
$txtArea.AddItem($item)
Next

To

code:
 $ou = "Your Domain"
$txtArea.AddItem($ou)

3. In the EnumOu UDF change this code
code:
 	$Computers = GetObject($area)
and
$Item = $List.Items.Add($name)


to

code:
 	$Computers = Netview($ou)
and
$Item = $List.Items.Add($Item)


I think that is all the changes I made. If this doesn't work let me know and I will double check the changes I made.

[ 14. January 2003, 16:23: Message edited by: Will Hetrick ]


LASAD
(Getting the hang of it)
2003-01-15 07:59 AM
Re: McAfee Manager

Will,

Thanks alot, it worked ok.

Rad,

very nice script, even though we do have SMS (and MCafee reports), this is good to have a fast query for DAT and engine versions.

Thanks again,


Will Hetrick
(Hey THIS is FUN)
2003-01-16 12:54 AM
Re: McAfee Manager

LASAD,
Always glad to help. It's very rare for me to get something in with so many helpful people on this BBS.

Radimus,
As I was running this script, I noticed that it did not always give the right information Especially on servers. I am going to dig into what is being reported and what is really on it and let you know what I find.


Radimus
(KiX Supporter)
2003-01-15 01:46 PM
Re: McAfee Manager

I saw that also... but that would probably be due to the servers having NetShield instead of VirusScan.

It does push out the update and execute it, but can't tell if successful.

I was going to look into it also, but admin gets touchy if people start poking about in the servers registry...


Radimus
(KiX Supporter)
2003-01-15 01:49 PM
Re: McAfee Manager

BTW... I was thinking of adding a 4th column... to report the status of the McShield service.. and perhaps to turn it on, if not running.

Will Hetrick
(Hey THIS is FUN)
2003-01-16 01:53 PM
Re: McAfee Manager

Here is the changes I made to correctly identify netshield 4.5, Viruscan 4.5 and Enterprise 7.0 machines
Changed in the check click function
code:
 
if $p[1]=1
$eng=readvalue("\\$computer\$vsengine","szEngineVer")
if @error $eng="Unavailable" endif
$dat=readvalue("\\$computer\$vsengine","szDatVersion")
if @error $dat="Unavailable" endif
$Item.SubItems(1).Text=$eng
$Item.SubItems(2).Text=$dat
else
$Item.SubItems(1).Text="Offline"
endif
$item.selected = 0
next


to

code:
 
if $p[1]=1
$HKEYTVD = "\\$computer\HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\"
Select
; #### Check if installed Viruscan Multiplatform version 4.5.x.xxxx
Case ExistKey($HKEYTVD + "VirusScan") = 0
$regver = ReadValue($HKEYTVD + "Shared Components\VirusScan Engine\4.0.xx","szDatVersion")
$engver = ReadValue($HKEYTVD + "Shared Components\VirusScan Engine\4.0.xx","szEngineVer")
; #### Check if NetShield 4.5.x.xxxx installed
Case ExistKey($HKEYTVD + "NetShield NT") = 0
$regver = ReadValue($HKEYTVD + "NetShield NT\CurrentVersion","szVirDefVer")
$engver = ReadValue($HKEYTVD + "NetShield NT\CurrentVersion","szEngineVer")
; #### Check if installed Viruscan Enterprise Version 7.0.0.xxx
Case ExistKey($HKEYTVD + "VirusScan Enterprise") = 0
$regver = ReadValue($HKEYTVD + "Shared Components\VirusScan Engine\4.0.xx","szVirDefVer")
$engver = ReadValue($HKEYTVD + "Shared Components\VirusScan Engine\4.0.xx","szEngineVer")
; #### DEFAULT WHEN AN OUTDATED VERSION OR NO MCAFEE CAN BE FOUND
Case 1
$REGVER = "Unavailable"
$ENGVER = "Unavailable"
EndSelect
; corrects the Dat Version on different install versions to match the same format.
If $regver > 4000 AND $Regver <> "Unavailable"
$regver = "4.0." + $regver
Else
If $regver < 1
$regver = "4." + SubStr($Regver,1,6)
EndIf
EndIf
$eng=$Engver
$dat=$regver
$Item.SubItems(1).Text=$eng
$Item.SubItems(2).Text=$dat
Else
$Item.SubItems(1).Text="Offline"
EndIf
$item.selected = 0
Next




Will Hetrick
(Hey THIS is FUN)
2003-01-16 02:14 PM
Re: McAfee Manager

Luckily Rad, I am the Script manager and the server manager here. So I can look these things up easily without someone yelling at me! [Big Grin]

Raceeend
(Starting to like KiXtart)
2003-01-17 08:45 PM
Re: McAfee Manager

The script looks nice, but how do i get it to work in a NT domain?

Sealeopard
(KiX Master)
2003-01-17 08:51 PM
Re: McAfee Manager

If you would have read the thread carefully, you would have come across a post by Radimus stating
quote:
replace the EnumOU() function with EnumDHCP()

But you will need to hardcode in you DHCP servers and subnets...



Raceeend
(Starting to like KiXtart)
2003-01-17 09:57 PM
Re: McAfee Manager

I know sorry.

But can you tell me where i can find joinarray()
Because i can't find it on the board.


Les
(KiX Master)
2003-01-17 10:04 PM
Re: McAfee Manager

Is this it?

http://www.scriptlogic.com/kixtart/FunctionLibrary_ViewFunction.aspx?ID=JoinArray


Will Hetrick
(Hey THIS is FUN)
2003-01-18 07:56 PM
Re: McAfee Manager

Raceeend,
If you look upon further inspection, you will see I posted changes to make it work with an NT domain.
The reason I made the changes instead of the Enumdhcp that radimus sugessted is we
do not use DHCP in our environment.

[ 18. January 2003, 19:57: Message edited by: Will Hetrick ]


Raceeend
(Starting to like KiXtart)
2003-01-21 01:26 PM
Re: McAfee Manager

Ok,

I finally managed to get the script running :-)

I've got one problem though. When i set the engine & dat path and select a server the update button can't be selected. How can this be solved?


Will Hetrick
(Hey THIS is FUN)
2003-01-22 01:36 PM
Re: McAfee Manager

The update button does not appear until you choose the domain and them check the machines.

Raceeend
(Starting to like KiXtart)
2003-01-22 04:48 PM
Re: McAfee Manager

This is what i do:

 -

But as you can see the button can not be clicked.


Radimus
(KiX Supporter)
2003-01-22 04:52 PM
Re: McAfee Manager

what happens when you double-click in the listview?

there are also a few variables set to tag whether an update/scan can occur. one of them may have been removed when you modified the code?

look and see if this in in the bottom of Function Check_Click()

$checkComplete = 1
Status("Check complete")
$List.setfocus
Double_Click()
endfunction

[ 22. January 2003, 16:56: Message edited by: Radimus ]


Raceeend
(Starting to like KiXtart)
2003-01-23 09:34 AM
Re: McAfee Manager

Thank you it is working now.