来自微软官方,写USB小偷脚本是最好不过的了

复制代码 代码如下:

strcomputer = “.”

Set objWMIService = GetObject(“winmgmts:” _

& “{impersonationLevel=impersonate}!\\” & strComputer & “\root\cimv2”)

Set colMonitoredEvents = objWMIService. _

ExecNotificationQuery(“Select * from Win32_VolumeChangeEvent”)

Do

Set objLatestEvent = colMonitoredEvents.NextEvent

Wscript.Echo objLatestEvent.DriveName

Wscript.Echo objLatestEvent.EventType

Wscript.Echo objLatestEvent.Time_Created

Loop

您可能感兴趣的文章:

声明:本站(华域联盟www.cnhackhy.com)所有文章,如无特殊说明或标注,均为本站原创发布。任何个人或组织,在未征得本站同意时,禁止复制、盗用、采集、发布本站内容到任何网站、书籍等各类媒体平台。如若本站内容侵犯了原著者的合法权益,可联系我们进行处理。