windows上如何获取本机的杀毒软件安装信息

[dddengyunjie]

具体有是否安装杀软，防护功能是否开启，病毒库是否过期等，最好能用vc代码实现

[oyljerry]

通过WMI接口来访问，系统有接口查询这个信息。

[dddengyunjie]

引用 1 楼 oyljerry 的回复:

通过WMI接口来访问，系统有接口查询这个信息。

这个方法试过了 查不到杀毒信息啊 不知道是不是代码写错了，帮忙看看？

#define _WIN32_DCOM
#include <iostream>
using namespace std;
#include <comdef.h>
#include <Wbemidl.h>

# pragma comment(lib, "wbemuuid.lib")

int main(int argc, char **argv)
{
    HRESULT hres;

    // Initialize COM.
    hres =  CoInitializeEx(0, COINIT_MULTITHREADED); 
    if (FAILED(hres))
    {
        cout << "Failed to initialize COM library. " 
            << "Error code = 0x" 
            << hex << hres << endl;
        return 1;              // Program has failed.
    }

    // Initialize 
    hres =  CoInitializeSecurity(
        NULL,     
        -1,      // COM negotiates service                  
        NULL,    // Authentication services
        NULL,    // Reserved
        RPC_C_AUTHN_LEVEL_DEFAULT,    // authentication
        RPC_C_IMP_LEVEL_IMPERSONATE,  // Impersonation
        NULL,             // Authentication info 
        EOAC_NONE,        // Additional capabilities
        NULL              // Reserved
        );

                      
    if (FAILED(hres))
    {
        cout << "Failed to initialize security. " 
            << "Error code = 0x" 
            << hex << hres << endl;
        CoUninitialize();
        return 1;          // Program has failed.
    }

    // Obtain the initial locator to Windows Management
    // on a particular host computer.
    IWbemLocator *pLoc = 0;

    hres = CoCreateInstance(
        CLSID_WbemLocator,             
        0, 
        CLSCTX_INPROC_SERVER, 
        IID_IWbemLocator, (LPVOID *) &pLoc);
 
    if (FAILED(hres))
    {
        cout << "Failed to create IWbemLocator object. "
            << "Error code = 0x"
            << hex << hres << endl;
        CoUninitialize();
        return 1;       // Program has failed.
    }

    IWbemServices *pSvc = 0;

    // Connect to the root\cimv2 namespace with the
    // current user and obtain pointer pSvc
    // to make IWbemServices calls.

    hres = pLoc->ConnectServer(
        
        _bstr_t(L"ROOT\\CIMV2"), // WMI namespace
        NULL,                    // User name
        NULL,                    // User password
        0,                       // Locale
        NULL,                    // Security flags                 
        0,                       // Authority       
        0,                       // Context object
        &pSvc                    // IWbemServices proxy
        );                              
    
    if (FAILED(hres))
    {
        cout << "Could not connect. Error code = 0x" 
            << hex << hres << endl;
        pLoc->Release();     
        CoUninitialize();
        return 1;                // Program has failed.
    }

    cout << "Connected to ROOT\\CIMV2 WMI namespace" << endl;

    // Set the IWbemServices proxy so that impersonation
    // of the user (client) occurs.
    hres = CoSetProxyBlanket(
       
       pSvc,                         // the proxy to set
       RPC_C_AUTHN_WINNT,            // authentication service
       RPC_C_AUTHZ_NONE,             // authorization service
       NULL,                         // Server principal name
       RPC_C_AUTHN_LEVEL_CALL,       // authentication level
       RPC_C_IMP_LEVEL_IMPERSONATE,  // impersonation level
       NULL,                         // client identity 
       EOAC_NONE                     // proxy capabilities     
    );

    if (FAILED(hres))
    {
        cout << "Could not set proxy blanket. Error code = 0x" 
             << hex << hres << endl;
        pSvc->Release();
        pLoc->Release();     
        CoUninitialize();
        return 1;               // Program has failed.
    }


    // Use the IWbemServices pointer to make requests of WMI. 
    // Make requests here:

    // For example, query for all the running processes
    IEnumWbemClassObject* pEnumerator = NULL;
    hres = pSvc->ExecQuery(
        bstr_t("WQL"), 
        //bstr_t("SELECT * FROM Win32_Process"),
		bstr_t("SELECT * FROM AntiVirusProduct"),
        WBEM_FLAG_FORWARD_ONLY | WBEM_FLAG_RETURN_IMMEDIATELY, 
        NULL,
        &pEnumerator);
    
    if (FAILED(hres))
    {
        cout << "Query for processes failed. "
             << "Error code = 0x" 
             << hex << hres << endl;
        pSvc->Release();
        pLoc->Release();     
        CoUninitialize();
        return 1;               // Program has failed.
    }
    else
    { 
        IWbemClassObject *pclsObj;
        ULONG uReturn = 0;
   
        while (pEnumerator)
        {
            hres = pEnumerator->Next(WBEM_INFINITE, 1, 
                &pclsObj, &uReturn);

            if(0 == uReturn)
            {
                break;
            }

            VARIANT vtProp;

            // Get the value of the Name property
            hres = pclsObj->Get(L"Name", 0, &vtProp, 0, 0);
            //wcout << "Process Name : " << vtProp.bstrVal << endl;
			wcout << "AV  Product displayName : " << vtProp.bstrVal << endl;
            VariantClear(&vtProp);
        }
         
    }
 
    // Cleanup
    // ========

    pSvc->Release();
    pLoc->Release();     
    CoUninitialize();

	system("pause");
    return 0;   // Program successfully completed.
}

[赵4老师]

就算你能获取今年流行的所有杀毒软件的安装信息，你也无法保证能获取明年流行的所有杀毒软件的安装信息。

[dddengyunjie]

引用 3 楼 zhao4zhong1 的回复:

就算你能获取今年流行的所有杀毒软件的安装信息，你也无法保证能获取明年流行的所有杀毒软件的安装信息。

我现在是连今年的都还获取不了啊

[赵4老师]

引用 4 楼 dyj5841619 的回复:

[quote=引用 3 楼 zhao4zhong1 的回复:] 就算你能获取今年流行的所有杀毒软件的安装信息，你也无法保证能获取明年流行的所有杀毒软件的安装信息。

我现在是连今年的都还获取不了啊[/quote] 我的意思是别在这个问题上浪费太多青春。 直接查相关注册表项就够了。 比如遍历[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\*.*]

[dddengyunjie]

引用 5 楼 zhao4zhong1 的回复:

[quote=引用 4 楼 dyj5841619 的回复:] [quote=引用 3 楼 zhao4zhong1 的回复:] 就算你能获取今年流行的所有杀毒软件的安装信息，你也无法保证能获取明年流行的所有杀毒软件的安装信息。

我现在是连今年的都还获取不了啊[/quote] 我的意思是别在这个问题上浪费太多青春。 直接查相关注册表项就够了。 比如遍历[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\*.*][/quote] 我也觉得挺没意思的，但是工作需要，为了吃口饭啊