> Services > AV Status Service

AV Status Service

The AV Status service provides consolidated management of antivirus applications. The service reports the following information for antivirus software:

  • product name,
  • scanning status,
  • current status of updates, and
  • version information.

To add the AV Status service to a device, you must run the AV Security script available in the SolarWinds MSP Resource Center.

Service Type


Instances on a Device


Supported Systems/Applications

Windows XP, Windows Vista

Device Class

Laptop - Windows, Server - Windows, Workstation - Windows

Monitored By

Windows Probe, Windows Agent

Service Description

This service uses the root\SecurityCenter WMI class on a Windows XP/Vista workstation to establish the Antivirus Product name, Scanning status, Up-to-date status, and Version number.

Scan Interval (Minutes)

15 minutes (default), 60 minutes (maximum)

Properties Queried and Calculations Performed

Namespace root\SecurityCenter
WMI Class AntiVirusProduct
WMI Property 0 DisplayName
WMI Property 1 onAccessScanningEnabled
WMI Property 2 productUptoDate
WMI Property 3 versionNumber

Status Details

Status Detail


Antivirus Product Name

Identifies the antivirus software being monitored. Normally including both the vendor name as well as the specific product name.

Virus Scanning Enabled

Indicates whether the antivirus software is currently actively scanning or disabled.

Antivirus Product UptoDate

Indicates whether the virus dictionary being used by the antivirus software is current or outdated.

Version Number

The release identifier of the monitored antivirus software.