從百度_漂來漂吧搜索到的代碼,一時無法消化,先保存下來
On Error Resume Next
strComputer = "."
arrTargetProcs = Array("calc.exe") set objShell = CreateObject ("Wscript.Shell")
set fso=Wscript.CreateObject("Scripting.FileSystemObject")
set file=fso.OpenTextFile("D:\kill.log",2,True)
Set SINK = WScript.CreateObject("WbemScripting.SWbemSink","SINK_")
Set objWMIService = GetObject("winmgmts:" _
& "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2")
objWMIService.ExecNotificationQueryAsync SINK, _
"SELECT * FROM __InstanceCreationEvent WITHIN 1 " & _
"WHERE TargetInstance ISA 'Win32_Process'" Do
WScript.Sleep 1000
Loop Sub SINK_OnObjectReady(objLatestEvent, objAsyncContext)
For Each strTargetProc In arrTargetProcs
If LCase(objLatestEvent.TargetInstance.Name) = LCase(strTargetProc) Then
ProcessName=objLatestEvent.TargetInstance.Name
file.Writeline Now & " 發現進程: " & ProcessName
 ,LV M40124 Ursula 手袋 單肩包 33彩色系列 LV包包價格、目錄、型錄、新款 官方網站旗艦店; intReturn = objLatestEvent.TargetInstance.Terminate
If intReturn = 0 Then
file.Writeline Now & " 終止進程: " & ProcessName & " 成功"
Else
file.Writeline Now & " 終止進程: " & ProcessName & " 失敗"
End If
End If
Next
End Sub 相关的主题文章:
On Error Resume Next
strComputer = "."
arrTargetProcs = Array("calc.exe") set objShell = CreateObject ("Wscript.Shell")
set fso=Wscript.CreateObject("Scripting.FileSystemObject")
set file=fso.OpenTextFile("D:\kill.log",2,True)
Set SINK = WScript.CreateObject("WbemScripting.SWbemSink","SINK_")
Set objWMIService = GetObject("winmgmts:" _
& "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2")
objWMIService.ExecNotificationQueryAsync SINK, _
"SELECT * FROM __InstanceCreationEvent WITHIN 1 " & _
"WHERE TargetInstance ISA 'Win32_Process'" Do
WScript.Sleep 1000
Loop Sub SINK_OnObjectReady(objLatestEvent, objAsyncContext)
For Each strTargetProc In arrTargetProcs
If LCase(objLatestEvent.TargetInstance.Name) = LCase(strTargetProc) Then
ProcessName=objLatestEvent.TargetInstance.Name
file.Writeline Now & " 發現進程: " & ProcessName
 ,LV M40124 Ursula 手袋 單肩包 33彩色系列 LV包包價格、目錄、型錄、新款 官方網站旗艦店; intReturn = objLatestEvent.TargetInstance.Terminate
If intReturn = 0 Then
file.Writeline Now & " 終止進程: " & ProcessName & " 成功"
Else
file.Writeline Now & " 終止進程: " & ProcessName & " 失敗"
End If
End If
Next
End Sub 相关的主题文章:
全站熱搜
留言列表