 Loading |
|
Loading |
| VBScript |
| JavaScript |
| Powershell |
Search Options: WMI ModuleLoadUnLoad Query
|
||
|
On Error Resume Next
Const wbemFlagReturnImmediately = &h10 Const wbemFlagForwardOnly = &h20 arrComputers = Array(".") For Each strComputer In arrComputers WScript.Echo WScript.Echo "==========================================" WScript.Echo "Computer: " & strComputer WScript.Echo "==========================================" Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\WMI") Set colItems = objWMIService.ExecQuery("SELECT * FROM ModuleLoadUnLoad", "WQL", _ wbemFlagReturnImmediately + wbemFlagForwardOnly) For Each objItem In colItems WScript.Echo "AssemblyId: " & objItem.AssemblyId strEventGuid = Join(objItem.EventGuid, ",") WScript.Echo "EventGuid: " & strEventGuid WScript.Echo "EventSize: " & objItem.EventSize WScript.Echo "EventType: " & objItem.EventType WScript.Echo "InstanceId: " & objItem.InstanceId WScript.Echo "KernelTime: " & objItem.KernelTime WScript.Echo "ModuleFlags: " & objItem.ModuleFlags WScript.Echo "ModuleId: " & objItem.ModuleId WScript.Echo "ModuleILPath: " & objItem.ModuleILPath WScript.Echo "ModuleNativePath: " & objItem.ModuleNativePath WScript.Echo "MofData: " & objItem.MofData WScript.Echo "MofLength: " & objItem.MofLength strParentGuid = Join(objItem.ParentGuid, ",") WScript.Echo "ParentGuid: " & strParentGuid WScript.Echo "ParentInstanceId: " & objItem.ParentInstanceId WScript.Echo "ReservedHeaderField: " & objItem.ReservedHeaderField WScript.Echo "ThreadId: " & objItem.ThreadId WScript.Echo "TimeStamp: " & objItem.TimeStamp WScript.Echo "TraceLevel: " & objItem.TraceLevel WScript.Echo "TraceVersion: " & objItem.TraceVersion WScript.Echo "UserTime: " & objItem.UserTime WScript.Echo Next Next | ||
© 2008 - 2013 Boris Toll :: Scripts available: 6.481 :: :: scriptbox.toll.at :: :: powered by www.toll.at :: | ||
