SOIS does not ship with antivirus (AV) definitions. When you run SOIS, it searches for AV definitions that exist in an existing installation of SEP or SAV. SOIS then loads definitions from the SEP or SAV installation location and use them for scanning. You can override this behavior by specifying a path to the AV definitions that can be used instead [ Reference Section: GUI Settings and CLI options ].
SOIS is compatible with the AV definitions of Symantec Endpoint Protection (SEP) versions 11 & 12 and Symantec AntiVirus (SAV) version 10. Other versions of SEP/SAV are not supported.
Locating AV definitions in SEP/SAV
If you wish to use AV definitions from a specific folder, you need to first copy them from an existing installation of SEP/SAV. For this you need to first determine the location of AV definitions in SEP/SAV. You can do this by running SOIS on the computer that has SEP/SAV installed. The SOIS main window displays the location of AV definitions of SEP/SAV as shown in this screenshot.