Windows 10: WMI SecurityCenter2 AntiVirusProduct shows a deleted antivirus name

[COLOR=rgba171, 178, 191, 1]
[COLOR=rgba152, 195, 121, 1]wmic /node:localhost /namespace:[/COLOR][COLOR=rgba86, 182, 194, 1]\\[/COLOR][COLOR=rgba152, 195, 121, 1]root\SecurityCenter2 path AntiVirusProduct Get DisplayName findstr /V /B /C:displayName[/COLOR][/COLOR]

When i use this command, it yields a name of an antivirus, which was deleted from the system and is no longer available It detects Kaspersky antivirus. I've restarted PC a several times but that did not help me. What's wrong?

:)

 

WMI report inconsistent

[running Windows 10 Creators]

Hi,

While investigating the "Error while updating ESET NOD32 Antivirus status to SECURITY_PRODUCT_STATE_ON." problem, I discovered something rather strange...

If I go to Security and Maintenance, the system reports that ESET NOD32 is turned on. However, if I use WMIC to list the installed security products this way :

wmic /namespace:\\root\SecurityCenter2 path AntiVirusProduct get * /value

the result is : No Instance(s) available.

This is inconsistent. Or Windows doesn't use WMI in the Security Center to retrieve the installed antivirus apps. Did I miss something ?

 

WMI report inconsistent

When a security suite properly registers with WSC (Windows Security Center) it should have an entry in WMI. Here is the powershell version which should work
Get-WmiObject -Namespace root\SecurityCenter2 -Query 'select * from AntivirusProduct'

 

Output of WMI API doesn't reflect after changing local group policy setting for AV update

We execute WMI API "Get-Wmiobject -ComputerName xxxxx -nameSpace root/SecurityCenter2 -Class AntiVirusProduct" to get product state of antivirus product, through which we understand statement of health details.

We also see this option specific to windows 8.1/10 called "Define the number of days before antivirus definitions are considered out of date" if we navigate to "Start->gpedit.msc->Computer Configuration->Administrative Templates->Windows Components->Windows
Defender->Signature Updates". By changing the configuration of this option we expect change in product state output. But we don't see any impact on WMI product state values.

Can you please share what's the significance of this option and if it has any impact on WMI API product state values?

Thanks advance for your help.