Antivirus Status, Last OS update tests

Kris · Post by **Kris** » Tue Nov 10, 2020 6:04 am

Both the new and awesome 'Last OS update' and the 'Antivirus Status' are failing to me

'Last OS update' returns 'Unknown: Invalid date 11/22/2014' or 'Unknown: Invalid date 10/14/2020'; looks like some date/time formatting thingy to me...

'Antivirus Status' works for Win10 + 3rd party AV software, but doesn't seem to work for Win2012R2/2016 with 3rd party AV software

Still testing....

KS-Soft · Post by **KS-Soft** » Tue Nov 10, 2020 6:49 am

OS updates
Could you please try this update (unzip and replace hostmon.exe module)
www.ks-soft.net/download/hm1256c.zip

Antivirus Status
Yes, that's correct behavior. Defender can be checked on Windows 7, 8.1, 10, Windows Server 2012 R2 and newer.
3rd party antivirus software can be checked on Windows 7, 8.1 or Windows 10.

Quote from the manual:

Check antivirus/antispyware status, uptodate state (Win 7-10)
This option tells HostMonitor to check built-in or 3rd party antivirus and antispyware software running on Windows 7, 8.1 or Windows 10 systems. Test will set Bad status when all antivirus products disabled or some software is out of date.

Check Defender: pending reboot/manual steps, critical failure
With this option enabled HostMonitor will check Defender running on Windows 8.1, Windows 10 or Windows Server systems (starting from Windows Server 2012 R2) and set Bad status when Defender requires reboot or some manual steps or critical failure detected.

Check Defender: alert if signatures age >= N days
With this option enabled HostMonitor will check Defender running on Windows 8.1, Windows 10 or Windows Server systems (starting from Windows Server 2012 R2) and set Bad status when Defender database is too old.

Regards
Alex

Kris · Post by **Kris** » Tue Nov 10, 2020 7:55 am

Hi Alex,

Thanks for the update.
OS update check works.
However, it reports the days-since the last 'Preview of Monthly Rollup for Windows Server etc'; it doesn't take subsequent updates like Security updates or other products into account.
Is this by design?

Kris · Post by **Kris** » Tue Nov 10, 2020 7:58 am

KS-Soft wrote: 3rd party antivirus software can be checked on Windows 7, 8.1 or Windows 10.

Awwwwwâ€¦ we have everything on 3rd party AV software, including our servers.... Oh well, you can't have it all

KS-Soft · Post by **KS-Soft** » Tue Nov 10, 2020 8:28 am

Kris wrote:However, it reports the days-since the last 'Preview of Monthly Rollup for Windows Server etc'; it doesn't take subsequent updates like Security updates or other products into account.
Is this by design?

For some reason Windows does not provide information about some updates but normally Security updates should be listed.
Have you set "any update" test option?

We plan to implement WSUS test method as well but cannot find any manual related to WSUS SOAP requests while we do not want to use powershell for the tests (external processes are not good for performance)

Regards
Alex

Ben · Post by **Ben** » Fri Nov 13, 2020 9:20 am

Hi,

Even after the hotfix up here the dates aren't valid for us (french win 2016 servers).

For reference:
https://i.imgur.com/0EWZkya.png

https://i.imgur.com/poVLvoy.png

Regards,

Ben

KS-Soft · Post by **KS-Soft** » Fri Nov 13, 2020 10:51 am

We tried French regional options, date format - cannot reproduce the problem.
What exactly test "reply" do you see?
hostmon.exe size 11362304 ?

Regards
Alex

Ben · Post by **Ben** » Fri Nov 13, 2020 12:20 pm

You can see it at the top of my screenshots:
RMA: 301 - Invalid date 10/18/2018 for exemple

I put 2 exemples, one with security update the other with any update;

oakyuz · Post by **oakyuz** » Fri Nov 13, 2020 2:40 pm

Hi Alex

Do you plan to implement 3rd party antivirus programs check for Windows servers?

Regards

KS-Soft · Post by **KS-Soft** » Fri Nov 13, 2020 3:06 pm

Ben wrote:You can see it at the top of my screenshots:
RMA: 301 - Invalid date 10/18/2018 for exemple

Sorry missed that line.
If you are using RMA agent then you should update RMA, not HostMonitor.
You may update entire package
https://www.ks-soft.net/download/host-mon.exe

Regards
Alex

KS-Soft · Post by **KS-Soft** » Fri Nov 13, 2020 3:08 pm

oakyuz wrote:Do you plan to implement 3rd party antivirus programs check for Windows servers?

I think this has to be done separately for each 3rd party antivirus.
Which one do you use?

Regards
Alex

oakyuz · Post by **oakyuz** » Sat Nov 14, 2020 6:48 am

We use Kaspersky Security for Windows servers.

From your reply, I concluded that there is a specific parameter that can be used to check for the status of 3rd party antivirus softwares for Win7-10 and you use it for this test. In addition, Windows servers can not be checked as the same way and should be implemented separately for each vendor. Right?

Regards.

KS-Soft · Post by **KS-Soft** » Sat Nov 14, 2020 8:13 am

Correct.
I think we can add tests for Kaspersky, ESET, may be couple more antivirus products.
Its possible to check status, license expiration and database age, at least for Kaspersky and ESET

Regards
Alex

Ben · Post by **Ben** » Sat Nov 14, 2020 2:17 pm

KS-Soft wrote:
Ben wrote:You can see it at the top of my screenshots:
RMA: 301 - Invalid date 10/18/2018 for exemple
Sorry missed that line.
If you are using RMA agent then you should update RMA, not HostMonitor.
You may update entire package
https://www.ks-soft.net/download/host-mon.exe

Regards
Alex

RMA were installed this friday with latest package.

ntupin · Post by **ntupin** » Mon Nov 16, 2020 2:04 am

Same Here

installed hosmonitor 12.56c from patch
installed RAM 7.30 on windows 2016

still having invalid Date
RMA: 301 - invalid date 10/18/2018

regards