wmi.get[root\SecurityCenter,SELECT onAccessScanningEnabled FROM AntiVirusProduct]
C:\Windows\System32>wmic /NAMESPACE:\\root\SecurityCenter2 PATH AntiVirusProduct GET /value displayName=ESET Endpoint Antivirus 5.0 instanceGuid={77DEAFED-8149-104B-25A1-21771CA47CD1} pathToSignedProductExe=C:\Program Files\ESET\ESET NOD32 Antivirus\ecmd.exe pathToSignedReportingExe=C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe productState=266240
wmi.get[root\SecurityCenter2,SELECT productState FROM AntiVirusProduct]
Comment