Vexing registry relevance

Content Authoring
1

(imported topic written by tigger0191)

Hello all,

I’m trying to return the data inside the UninstallString value for Symantec Antivirus. I don’t know what I’m doing wrong here, it seems so straigt forward.

(values “DisplayName” of it, values “UninstallString” of it) of keys whose ((it contains “Symantec Antivirus”) of (value “DisplayName” of it as string as lowercase)) of key “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall” of registry

All 64 computers come back with . Any help would be appreciated.

2

(imported comment written by JackCoates91)

32 bit versus 64 bit? Does this relevance work? http://forum.bigfix.com/viewtopic.php?id=3621

3

(imported comment written by SystemAdmin)

On your DisplayName check, you have “as lowercase” on one side, but not the other. This should work:

(values "DisplayName" of it, values "UninstallString" of it) of keys whose ( (value "DisplayName" of it as string as lowercase) contains "Symantec Antivirus" as lowercase) of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall" of registry
4

(imported comment written by tigger0191)

Thank you so much! It works perfectly now. I really appreciate your help.