Check for anti-virus
This compliance document requires that Norton Anti-Virus Corporation Edition is running and the Anti-Virus definitions are less than 10 days old.
<BESClientComplianceDocument Version="1.0">
<ComplianceItem>
<Designator>AVDefinitionAge</Designator>
<Expression>
FALSE OR ((exists running application "vptray.exe" OR exists
running application "rtvscan.exe") AND exists
key "HKEY_LOCAL_MACHINE\Software\Symantec\SharedDefs"
of registry AND exists value "NAVCORP_70"
of key "HKEY_LOCAL_MACHINE\Software\Symantec\SharedDefs"
of registry AND (now - ((following text of position 6
of (preceding text of last "." of following text of last "\"
of (value "NAVCORP_70"
of key "HKEY_LOCAL_MACHINE\Software\Symantec\SharedDefs"
of registry as string)) & " " & first 3 of following text
of position (first 2 of following text of position 4
of (preceding text of last "." of following text
of last "\" of (value "NAVCORP_70"
of key "HKEY_LOCAL_MACHINE\Software\Symantec\SharedDefs"
of registry as string)) as integer * 3 - 3)
of "JanFebMarAprMayJunJulAugSepOctNovDec"
& " " & first 4 of (preceding text of last "."
of following text of last "\" of (value "NAVCORP_70"
of key "HKEY_LOCAL_MACHINE\Software\Symantec\SharedDefs"
of registry as string)) & " 00:00:00 - 0700")
as time)) < 10 * day)
</Expression>
<Description>
Elapsed time since the virus definition was last updated is less than
the specified number of day(s).
</Description>
<Comment>Compliant if True</Comment>
</ComplianceItem>
</BESClientComplianceDocument>