AMCore Content Date Verification

[mlajoie]

I know that you can check the date of the AMCore installation via the ENS console.  I was wondering if there is another way to check?  Maybe the registry or a folder somewhere?  Please advise.

[Former Member · Accepted solution]

Yes, you can: https://kc.mcafee.com/corporate/index?page=content&id=KB85784

Is there a way to determine the AMCore content version from the registry or file system?
Yes. Perform the following steps:

• From the registry:
  1. Navigate to the following registry key: [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\AVSolution\DS\DS]\
  2. Convert the major and minor version from hexadecimal to decimal. In the following example, the version is 2556.0. "dwContentMajorVersion"=dword:000009fc (000009fc is 2556 in decimal)
     "dwContentMinorVersion"=dword:00000000 (00000000 is 0 in decimal)
     
     The following date and time registry keys are also present. In the following example, the AMCore content was built on March 22, 2017 at 08:44:00 GMT.
      
     "szContentCreationDate"=reg_sz:"2017-03-22" (formatted date yyyy-mm-dd)
     "szContentCreationTime"=reg_sz:"08:44:00" (formatted time hh:mm:ss)
• From the file system (if managed by ePolicy Orchestrator):
  Locate the value of AvManifestVersion in the file C:\Program Files\McAfee\Endpoint Security\Threat Prevention\AvContentMgr.xml.
  In the following example, the version is 2591.0:
  2591.0

[mlajoie]

Perfect! I created a PS script that compares the two to tell the difference. Thanks a lot!

[Former Member]

hi, 

do you have a power shell comande that cn help to check that please !? 

Thanks in advance.

[mlajoie]

try this:

$ContentDate = Get-ItemPropertyValue -Path HKLM:\SOFTWARE\McAfee\AVSolution\DS\DS -Name szContentCreationDate
$CurrentDate = Get-Date -Format "yyyy-MM-dd"
$TimeSinceUpdate = (New-TimeSpan -Start $ContentDate -End $CurrentDate).Days
Write-Host "Your McAfee content was updated " $TimeSinceUpdate "day(s) ago on" $ContentDate"."
Read-Host -Prompt 'Press Enter key to exit'

[Former Member]

hi,
thank you for your replay,
this gave you the last time where ur McAafee was updated :
actualy i find the solution by this one

Get-ItemProperty -Path HKLM:\SOFTWARE\McAfee\AVSolution\DS\DS | Select dwContentMajorVersion, szContentCreationDate | FL -Wrap -AutoSize