G DATA Antivirus

The G DATA Antivirus check runs on the Windows device (x64 and Arm64) and monitors the locally installed G DATA Security Client: its services, real-time protection, signature age, the last full scan, recent detections, and whether the G DATA management server is reachable. It runs every 60 minutes by default.

Steps

1. Open the device under Devices and switch to the Checks tab.
2. Click Add Check → G DATA Antivirus.
3. Adjust the settings if needed.
4. Click Add Check.

To roll the check out to many devices at once, add it to a config package — see Assign checks with config packages.

Settings

Advanced options (visible after enabling Show advanced options)

• The check treats values below 1 for Signature warning age (hours) and Detection recency (days) as 1.
• With Scan warning age (days) set to 0, the scan age comparison is skipped. If no full scan has ever completed, the check still warns as long as Check last full scan age is on.
• A management server on the device itself (localhost or its own computer name) always counts as reachable.

Results

The check reports the worst status of all problems it finds.

All age limits are compared as "older than": a value exactly on the threshold does not trigger anything yet. If the local query cannot run or exceeds the timeout, the check reports an error instead of a result.

Real-time protection counts as active when the AVKWCtl guard service is running and G DATA reports on-access scanning as enabled. If G DATA reports no value for this, the AVKWCtl service alone decides.

The check collects:

• Installation state, product version, and edition
• State of the GDScan, AVKWCtl, and AVKProxy services
• Real-time protection
• Signature version, signature date, and signature age in hours
• Time and age of the last full scan, and the time of the last background scan activity
• Last detection with name, time, and whether it was moved to quarantine
• Management server and its reachability

See also: Set up alerts for a check