How to check if Forefront client is running scan via WMI? RRS feed

  • Question

  • Would there be a way to check if Forefront client is running a scan on a 2003 server by calling Win32_Process? If I know the process thats running the scan it would be helpful.



    Tuesday, November 23, 2010 9:28 PM


  • Hi,

    Thanks for the post.

    The Microsoft FCS Anti-malware Service is MsMpeng.exe. The main functions of the msmpeng.exe file include the ability to remove, quarantine, and prevent spyware infections. Aside from scanning for Spyware, the msmpeng.exe file also searches for worms and Trojans.

    In this case, you may call Win32_process class to monitor the process 'msmpeng.exe'.

    If you need further assistance on how to check if Forefront client is running a scan by calling Win32_Process, please re-post a new thread to our MSDN Forum:








    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    • Marked as answer by Miles Zhang Tuesday, November 30, 2010 2:57 AM
    Wednesday, November 24, 2010 8:28 AM