WMI commands to check Av installes ( leftovers etc)
WMIC /Node:localhost /Namespace:\\root\SecurityCenter2 Path AntiVirusProduct Get displayName,productState /Format:List
WMIC /Node:localhost /Namespace:\\root\SecurityCenter Path AntiVirusProduct Get displayName,productState /Format:List
wbemtest.exe
Connect. Enter ”root\SecurityCenter” alt ”root\SecurityCenter2” for newer computers (w7 etc)