Services Managed IT Services Business Internet Cloud Phone Systems Microsoft Teams Phone Business Mobile Advanced Wi-Fi Systems Cyber Security Connectivity & Hardware IT Consulting Structured Cabling AI & Automation CCTV Cloud Services Certifications
Case Studies
About About Us How We Work Onboarding / Switching Provider Contact Us
Login Book a Call

โ† Back to Knowledge Base

How to Display All Installed or Active Anti-Viruses

Use a single WMIC command to list all antivirus products registered in Windows โ€” and how to remove stale entries for software you've already uninstalled.

Blackwood IT
Blackwood IT Managed IT Support ยท Wolverhampton
Updated June 2026
Applies to: Windows 10Windows 11Windows Security Center
1

Run the WMIC command

Open Command Prompt as Administrator. Type the following command and press Enter:

WMIC /Node:localhost /Namespace:\\root\SecurityCenter2 Path AntiVirusProduct Get displayName

This will list all antivirus products currently registered with Windows Security Center.

WMIC command listing antivirus products in Command Prompt
2

Remove a stale antivirus entry

If a product you've already uninstalled is still showing, use wbemtest to remove it. Open Command Prompt and type:

wbemtest
Opening wbemtest from Command Prompt
3

Connect to SecurityCenter2

In the wbemtest window, click Connect. Type root\SecurityCenter2 in the namespace field and click Connect again.

Connecting to root\SecurityCenter2 in wbemtest
4

Enumerate and delete the stale entry

Click Enum Instances.

Enum Instances button in wbemtest

Enter the superclass name AntiVirusProduct and click OK.

Enter AntiVirusProduct as the superclass name

The list will show the same products as the WMIC command. Click the stale entry and click Delete.

Deleting a stale antivirus entry in wbemtest
โœ“

Antivirus list accurate

Your WMIC command will now only show antivirus products that are genuinely installed and active.

Need help with your antivirus setup?

We manage antivirus and endpoint security for businesses across the West Midlands. Get in touch or submit a ticket.

Frequently asked questions

How do I check what antivirus is installed on a Windows PC using CMD? +

Open Command Prompt as Administrator and run: WMIC /Node:localhost /Namespace:\\root\SecurityCenter2 Path AntiVirusProduct Get displayName โ€” This lists all antivirus software registered with Windows Security Center.

Why is an uninstalled antivirus still showing in Windows Security Center? +

When antivirus software is uninstalled it sometimes leaves a registration entry in the Windows Management Instrumentation (WMI) database. This ghost entry can be removed using wbemtest to connect to root\SecurityCenter2 and delete it manually.

Can I have two antivirus programs active at the same time on Windows? +

Running two active antivirus products simultaneously is not recommended โ€” they can conflict with each other, causing performance issues and missed detections. Windows Defender will typically disable itself when a third-party antivirus is detected.

What is Windows SecurityCenter2 in WMI? +

SecurityCenter2 is a Windows Management Instrumentation namespace that stores information about security products registered with Windows Security Center, including antivirus, firewall, and anti-spyware software.