Question

我需要找到Windows 7计算机中所有已安装的防病毒软件的列表。我正在使用WMI。我无法获得所有AV的列表。它只显示1 AV。我无法知道如何循环获取所有AV。以下是我的示例代码。

 #define _WIN32_DCOM
 #include <iostream>
 using namespace std;
 #include <comdef.h>
 #include <Wbemidl.h>

 # pragma comment(lib, "wbemuuid.lib")

 int main(int argc, char **argv)
{
HRESULT hres = S_FALSE;

// Step 1: --------------------------------------------------
// Initialize COM. ------------------------------------------

hres =  CoInitializeEx(0, COINIT_MULTITHREADED); 
if (FAILED(hres))
{
    cout << "Failed to initialize COM library. Error code = 0x" 
        << hex << hres << endl;
    return 1;                  // Program has failed.
}

// Step 2: --------------------------------------------------
// Set general COM security levels --------------------------

hres =  CoInitializeSecurity(
    NULL, 
    -1,                          // COM authentication
    NULL,                        // Authentication services
    NULL,                        // Reserved
    RPC_C_AUTHN_LEVEL_DEFAULT,   // Default authentication 
    RPC_C_IMP_LEVEL_IMPERSONATE, // Default Impersonation  
    NULL,                        // Authentication info
    EOAC_NONE,                   // Additional capabilities 
    NULL                         // Reserved
    );


if (FAILED(hres))
{
    cout << "Failed to initialize security. Error code = 0x" 
        << hex << hres << endl;
    CoUninitialize();
    return 1;                    // Program has failed.
}

// Step 3: ---------------------------------------------------
// Obtain the initial locator to WMI -------------------------

IWbemLocator *pLoc = NULL;

hres = CoCreateInstance(
    CLSID_WbemLocator,             
    0, 
    CLSCTX_INPROC_SERVER, 
    IID_IWbemLocator, (LPVOID *) &pLoc);

if (FAILED(hres))
{
    cout << "Failed to create IWbemLocator object."
        << " Err code = 0x"
        << hex << hres << endl;
    CoUninitialize();
    return 1;                 // Program has failed.
}

// Step 4: -----------------------------------------------------
// Connect to WMI through the IWbemLocator::ConnectServer method

IWbemServices *pSvc = NULL;

// Connect to the root\cimv2 namespace with
// the current user and obtain pointer pSvc
// to make IWbemServices calls.
hres = pLoc->ConnectServer(
     _bstr_t(L"root\\SecurityCenter2"), // Object path of WMI namespace
     NULL,                    // User name. NULL = current user
     NULL,                    // User password. NULL = current
     0,                       // Locale. NULL indicates current
     NULL,                    // Security flags.
     0,                       // Authority (for example, Kerberos)
     0,                       // Context object 
     &pSvc                    // pointer to IWbemServices proxy
     );

if (FAILED(hres))
{
    cout << "Could not connect. Error code = 0x" 
         << hex << hres << endl;
    pLoc->Release();     
    CoUninitialize();
    return 1;                // Program has failed.
}
hres = S_FALSE;

cout << "Connected to root\\SecurityCenter2 WMI namespace" << endl;


// Step 5: --------------------------------------------------
// Set security levels on the proxy -------------------------

hres = CoSetProxyBlanket(
   pSvc,                        // Indicates the proxy to set
   RPC_C_AUTHN_WINNT,           // RPC_C_AUTHN_xxx
   RPC_C_AUTHZ_NONE,            // RPC_C_AUTHZ_xxx
   NULL,                        // Server principal name 
   RPC_C_AUTHN_LEVEL_CALL,      // RPC_C_AUTHN_LEVEL_xxx 
   RPC_C_IMP_LEVEL_IMPERSONATE, // RPC_C_IMP_LEVEL_xxx
   NULL,                        // client identity
   EOAC_NONE                    // proxy capabilities 
);

if (FAILED(hres))
{
    cout << "Could not set proxy blanket. Error code = 0x" 
        << hex << hres << endl;
    pSvc->Release();
    pLoc->Release();     
    CoUninitialize();
    return 1;               // Program has failed.
}
hres = S_FALSE;

// Step 6: --------------------------------------------------
// Use the IWbemServices pointer to make requests of WMI ----

// For example, get the name of the operating system
IEnumWbemClassObject* pEnumerator = NULL;
hres = pSvc->ExecQuery(
    bstr_t("WQL"), 
    bstr_t("SELECT * FROM AntiVirusProduct"),
    WBEM_FLAG_FORWARD_ONLY | WBEM_FLAG_RETURN_IMMEDIATELY, 
    NULL,
    &pEnumerator);

if (FAILED(hres))
{
    cout << "Query for AV  name failed."
        << " Error code = 0x" 
        << hex << hres << endl;
    pSvc->Release();
    pLoc->Release();
    CoUninitialize();
    return 1;               // Program has failed.
}

// Step 7: -------------------------------------------------
// Get the data from the query in step 6 -------------------

IWbemClassObject *pclsObj;
ULONG uReturn = 0;

while (pEnumerator)
{
    HRESULT hr = pEnumerator->Next(WBEM_INFINITE, 10, 
        &pclsObj, &uReturn);

   if(0 == uReturn)
    {
        break;
    }

    VARIANT vtProdName;
    VARIANT vtGuid;
    VARIANT vtPathSignedPrd;
    VARIANT vtPathSignedRpt;
    VARIANT vtProductState;

    // Get the value of the Name property
    hr = pclsObj->Get(L"displayName", 0, &vtProdName, 0, 0);
    hr = pclsObj->Get(L"instanceGuid", 0, &vtGuid, 0, 0);
    hr = pclsObj->Get(L"pathToSignedProductExe", 0, &vtPathSignedPrd, 0, 0);
    hr = pclsObj->Get(L"pathToSignedReportingExe", 0, &vtPathSignedRpt, 0, 0);
    hr = pclsObj->Get(L"productState", 0, &vtProductState, 0, 0);

    wcout << " AS Name : " << vtProdName.bstrVal << endl;
    wcout << " AS GUID : " << vtGuid.bstrVal << endl;
    wcout << " AS pathToSignedProductExe : " << vtPathSignedPrd.bstrVal << endl;
    wcout << " AS pathToSignedReportingExe : " << vtPathSignedRpt.bstrVal << endl;
    wcout << " AS productState : " << vtProductState.lVal << endl;



    VariantClear(&vtProdName);
    VariantClear(&vtGuid);
    VariantClear(&vtPathSignedPrd);
    VariantClear(&vtPathSignedPrd);
    VariantClear(&vtProductState);

    pclsObj->Release();
}

// Cleanup
// ========
if(!pclsObj)
pclsObj->Release();
pSvc->Release();
pLoc->Release();
pEnumerator->Release();
CoUninitialize();

return 0;   // Program successfully completed.

任何人都可以让我知道我需要在上面的代码中做出哪些更改才能获得计算机上安装的所有AV的列表。在此先感谢您的帮助。

Answer 1

修复代码的最简单方法是一次枚举IWbemClassObject个代码。为此，您需要将枚举代码更改为以下内容：

while (pEnumerator) {
    IWbemClassObject *pclsObj = NULL;
    ULONG uReturn = 0;

    HRESULT hr = pEnumerator->Next( WBEM_INFINITE, 1,  &pclsObj, &uReturn );

    if( FAILED( hr ) || ( 0 == uReturn ) ) {
        break;
    }

    // ...

    pclsObj->Release();
}

需要获取Win 7机器中安装的所有Antivirus的详细信息

1 个答案: