Check for anti-virus

This compliance document requires that Norton Anti-Virus Corporation Edition is running and the Anti-Virus definitions are less than 10 days old.

<BESClientComplianceDocument Version="1.0">
	<ComplianceItem>
		<Designator>AVDefinitionAge</Designator>
		<Expression>
			FALSE OR ((exists running application "vptray.exe" OR exists 
				running application "rtvscan.exe") AND exists 
				key "HKEY_LOCAL_MACHINE\Software\Symantec\SharedDefs" 
				of registry AND exists value "NAVCORP_70" 
				of key "HKEY_LOCAL_MACHINE\Software\Symantec\SharedDefs" 
				of registry AND (now - ((following text of position 6 
				of (preceding text of last "." of following text of last "\" 
				of (value "NAVCORP_70" 
				of key "HKEY_LOCAL_MACHINE\Software\Symantec\SharedDefs" 
				of registry as string)) & " " & first 3 of following text 
				of position (first 2 of following text of position 4 
				of (preceding text of last "." of following text 
				of last "\" of (value "NAVCORP_70" 
				of key "HKEY_LOCAL_MACHINE\Software\Symantec\SharedDefs" 
				of registry as string)) as integer * 3 - 3) 
				of "JanFebMarAprMayJunJulAugSepOctNovDec" 
				& " " & first 4 of (preceding text of last "." 
				of following text of last "\" of (value "NAVCORP_70" 
				of key "HKEY_LOCAL_MACHINE\Software\Symantec\SharedDefs" 
				of registry as string)) & " 00:00:00 - 0700") 
				as time)) < 10 * day)
		</Expression>
		<Description>
			Elapsed time since the virus definition was last updated is less than 
				the specified number of day(s).
		</Description>
		<Comment>Compliant if True</Comment>
	</ComplianceItem>
</BESClientComplianceDocument>