今天要说的是用VBS(VBScript脚本)来枚举Windows操作系统的进程,这样做的用处在什么地方呢?举个例子吧,比如你有时候想监控某个进程是否在运行,这就非常有用了.
示例:
用VBS脚本枚举进程

1. 'enum.vbs
   
2. Dim WMI,Objs,Process
   
3. Set WMI=GetObject("WinMgmts:")
   
4. Set Objs=WMI.InstancesOf("Win32_Process")
   
5. Process=""
   
6. For Each Obj In Objs
   
7.   Process=Process & Obj.Description & Chr(13) & Chr(10)
   
8. Next
   
9. MsgBox Process

复制代码

我在这儿采用的方式是弹出一个对话框,方便观看嘛,当然你也可以使用FSO来生成一个文本文件保存起来.
前面说到要监控某个进程是否在运行,实现如下.
示例:

1. 'monitor.vbs
   
2. '检测IE是否在运行中
   
3. Dim WMI,Objs,Process
   
4. Set WMI=GetObject("WinMgmts:")
   
5. Set Objs=WMI.InstancesOf("Win32_Process")
   
6. Process=""
   
7. For Each Obj In Objs
   
8. 'Process=Process & Obj.Description & Chr(13) & Chr(10)
   
9. Process = Obj.Description
   
10. if Process = "iexplore.exe" then
    
11. msgbox "IE在运行中..."
    
12. end if
    
13. Next

复制代码

呵呵,当然,还可以引申出来其它应用.
下面给大家分享一个列举进程详细列表的vbs

1. ' FileName: ProcessMagnifier.vbs
   
2. ' Function: Capture information about the running processes in detail
   
3. ' code by somebody
   
4. ' QQ: 240460440
   
5. ' LastModified: 2007-12-9 18:50
   
6. 
   
7. const HKEY_CURRENT_USER = &H80000001
   
8. Set oReg = GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\default:StdRegProv")
   
9. strKeyPath = "Console\%SystemRoot%_system32_cmd.exe"
   
10. oReg.CreateKey HKEY_CURRENT_USER,strKeyPath
    
11. strValueName1 = "CodePage"
    
12. dwValue1 = 936
    
13. strValueName2 = "ScreenBufferSize"
    
14. dwValue2 = 98304200
    
15. strValueName3 = "WindowSize"
    
16. dwValue3 = 2818173
    
17. strValueName4 = "HistoryNoDup"
    
18. dwValue4 = 0
    
19. strValueName5 = "WindowPosition"
    
20. dwValue5 = 131068
    
21. strValueName6 = "QuickEdit"
    
22. dwValue6 = 2048
    
23. oReg.SetDWORDValue HKEY_CURRENT_USER,strKeyPath,strValueName1,dwValue1
    
24. oReg.SetDWORDValue HKEY_CURRENT_USER,strKeyPath,strValueName2,dwValue2
    
25. oReg.SetDWORDValue HKEY_CURRENT_USER,strKeyPath,strValueName3,dwValue3
    
26. oReg.SetDWORDValue HKEY_CURRENT_USER,strKeyPath,strValueName4,dwValue4
    
27. oReg.SetDWORDValue HKEY_CURRENT_USER,strKeyPath,strValueName5,dwValue5
    
28. oReg.SetDWORDValue HKEY_CURRENT_USER,strKeyPath,strValueName6,dwValue6
    
29. 
    
30. Dim objWSH, FinalPath
    
31. Set objWSH = WScript.CreateObject("WScript.Shell")
    
32. If (Lcase(Right(WScript.Fullname,11))="wscript.exe") Then
    
33.   FinalPath = "'" & WScript.ScriptFullName & "'"
    
34.   objWSH.Run("cmd.exe /k cscript //nologo " &Replace(FinalPath,"'",""""))
    
35.   WScript.Quit
    
36. End If
    
37. 
    
38. oReg.DeleteKey HKEY_CURRENT_USER, strKeyPath
    
39. Set oReg = nothing
    
40. 
    
41. Wscript.Sleep 1000
    
42. Mystr = Array(115,111,109,101,98,111,100,121)
    
43. for i=0 to Ubound(Mystr)
    
44.   author=author&chr(Mystr(i))
    
45. 
    
46. Next
    
47. 
    
48. WScript.Echo
    
49. WScript.Sleep 3000
    
50. WScript.Echo "当前正在运行的进程简要信息列表如下:"
    
51. WScript.Echo vbCrLf
    
52. WScript.Sleep 2000
    
53. 
    
54. Dim MyOBJProcessName
    
55. Set OBJWMIProcess = GetObject("winmgmts:\\.\root\cimv2").ExecQuery("Select * From Win32_Process")
    
56.      WScript.Echo "Name:        Priority:  PID:  Owner:" &vbTab&vbTab&"ExecutablePath: "
    
57.      WScript.Echo "---------------------------------------------------------------------------------------"
    
58.          For Each OBJProcess in OBJWMIProcess
    
59.      MyOBJProcessName=OBJProcess.Name&"          "
    
60.          colProperties = OBJProcess.GetOwner(strNameOfUser,strUserDomain)
    
61.      WScript.Echo Mid(MyOBJProcessName,1,20) &vbTab& OBJProcess.Priority &vbTab& OBJProcess.ProcessID &vbTab& strNameOfUser &vbTab&vbTab& OBJProcess.ExecutablePath
    
62.      Next
    
63.    
    
64. WScript.Sleep 5000
    
65. WScript.Echo vbCrLf
    
66. WScript.Echo "当前正在运行的进程以及其加载的模块详细信息树状结构如下:"
    
67. WScript.Echo vbCrLf
    
68. WScript.Sleep 3000
    
69. WScript.Echo vbTab&vbTab&vbTab&vbTab&vbTab&vbTab&vbTab&vbTab&vbTab&vbTab&vbTab&vbTab&vbTab&vbTab&vbTab&vbTab& vbTab&"创建时间       文件制造商"
    
70. 
    
71. Set OBJWMIService = GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\cimv2")
    
72. Set OBJRefresher = CreateObject("WbemScripting.SWbemRefresher")
    
73. Set colItems = OBJRefresher.AddEnum(OBJWMIService,"Win32_PerfFormattedData_PerfProc_FullImage_Costly").ObjectSet
    
74. OBJRefresher.Refresh
    
75. For Each OBJItem In colItems
    
76.   Dim originalPath, ModulePath, WMIPathMode, FileManufacturer, LCaseModulePath
    
77.     Dim FileExtension, mark, MyLCaseModulePath, FinalModulePath
    
78.   originalPath = OBJItem.Name
    
79.   ModulePath = Split(originalPath,"/")
    
80.   WMIPathMode = Replace(ModulePath(1),"","\")
    
81.   Set OBJWMI = GetObject("winmgmts:\\.\root\CIMV2")
    
82.   Set colManufacturer = OBJWMI.ExecQuery("SELECT * FROM CIM_DataFile Where Name='" & WMIPathMode & "'")
    
83.   For Each OBJManufacturer In colManufacturer
    
84.       FileManufacturer=Trim(OBJManufacturer.Manufacturer)
    
85.       LCaseModulePath=LCase(Trim(OBJManufacturer.Name))
    
86.       FileExtension=Right(LCaseModulePath, 3)
    
87.       MyLCaseModulePath=LCaseModulePath & "                                                        "
    
88.       Set FSO = CreateObject("Scripting.FileSystemObject").GetFile(LCaseModulePath)
    
89.                If FileExtension="exe" Then
    
90.             mark="├—"
    
91.               FinalModulePath=Mid(MyLCaseModulePath,1,118)
    
92.               WScript.Echo "│"               
    
93.           Else
    
94.         mark="│├─"
    
95.               FinalModulePath=Mid(MyLCaseModulePath,1,116)
    
96.           End If
    
97.       WScript.Echo mark & FinalModulePath & FSO.DateCreated &vbTab& FileManufacturer            
    
98.     Next
    
99. Next
    
100. 
     
101. MyVBSPath = "'" & WScript.ScriptFullName & "'"   
     
102. Myclipboard = "cscript //nologo " & Replace(MyVBSPath,"'","""")
     
103. Set objIE = CreateObject("InternetExplorer.Application")
     
104. objIE.Navigate("about:blank")
     
105. objIE.document.parentwindow.clipboardData.SetData "text", Myclipboard

复制代码

经过测试效果很不错，喜欢vbs的朋友可以学习一下。

来源：互联网
免责声明：如果侵犯了您的权益，请联系站长（1277306191@qq.com），我们会及时删除侵权内容，谢谢合作！