邪恶八进制信息安全团队技术讨论组's Archiver

金州 2006-2-14 08:06

[转载]脚本 计划任务相关

<P>信息来源:邪恶八进制信息安全团队(<A href="http://www.eviloctal.com">www.eviloctal.com</A>)<BR>邪恶八进制综合整理。</P>
<H1>计划任务</H1>
<DIV style="HEIGHT: 18px"></DIV>
<P><B>描述</B></P>
<P>将记事本计划为每星期一、星期三和星期五下午 12:30 运行。</P>
<P><B>脚本代码</B></P><PRE class=codeSample>strComputer = "."
Set objWMIService = GetObject("winmgmts:" _
    & "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2")
Set objNewJob = objWMIService.Get("Win32_ScheduledJob")
errJobCreated = objNewJob.Create _
    ("Notepad.exe", "********123000.000000-420", _
        True , 1 OR 4 OR 16, , , JobID)
Wscript.Echo errJobCreated<BR><H1>枚举计划任务</H1><DIV style="HEIGHT: 18px"></DIV><P><B>描述</B></P><P>枚举计算机上的所有计划任务。注意:WMI 只能枚举使用 Win32_ScheduledJob 类别或 At.exe 实用程序创建的计划任务。它不能删除使用任务计划程序创建的任务。</P><P><B>脚本代码</B></P><PRE class=codeSample>strComputer = "."
Set objWMIService = GetObject("winmgmts:" _
    & "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2")
Set colScheduledJobs = objWMIService.ExecQuery _
    ("Select * from Win32_ScheduledJob")
For Each objJob in colScheduledJobs
    Wscript.Echo "Caption: " & objJob.Caption
    Wscript.Echo "Command: " & objJob.Command
    Wscript.Echo "Days Of Month: " & objJob.DaysOfMonth
    Wscript.Echo "Days Of Week: " & objJob.DaysOfWeek
    Wscript.Echo "Description: " & objJob.Description
    Wscript.Echo "Elapsed Time: " & objJob.ElapsedTime
    Wscript.Echo "Install Date: " & objJob.InstallDate
    Wscript.Echo "Interact with Desktop: " & objJob.InteractWithDesktop
    Wscript.Echo "Job ID: " & objJob.JobID
    Wscript.Echo "Job Status: " & objJob.JobStatus
    Wscript.Echo "Name: " & objJob.Name
    Wscript.Echo "Notify: " & objJob.Notify
    Wscript.Echo "Owner: " & objJob.Owner
    Wscript.Echo "Priority: " & objJob.Priority
    Wscript.Echo "Run Repeatedly: " & objJob.RunRepeatedly
    Wscript.Echo "Start Time: " & objJob.StartTime
    Wscript.Echo "Status: " & objJob.Status
    Wscript.Echo "Time Submitted: " & objJob.TimeSubmitted
    Wscript.Echo "Until Time: " & objJob.UntilTime
Next
<H1>删除所有计划任务</H1><DIV style="HEIGHT: 18px"></DIV><P><B>描述</B></P><P>删除计算机上的所有任务。注意:WMI 只能删除使用 Win32_ScheduledJob 类别或 At.exe 实用程序创建的计划任务。它不能删除使用任务计划程序创建的任务。</P><P><B>脚本代码</B></P><PRE class=codeSample>strComputer = "."
Set objWMIService = GetObject("winmgmts:" _
    & "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2")
Set colScheduledTasks = objWMIService.ExecQuery _
    ("Select * from Win32_ScheduledJob")
For Each objTask in colScheduledTasks
    intJobID = objTask.JobID
    Set objInstance = objWMIService.Get("Win32_ScheduledJob.JobID=" & intJobID)
    objInstance.Delete
Next
<H1>删除计划任务</H1><DIV style="HEIGHT: 18px"></DIV><P><B>描述</B></P><P>删除 JobID 为 1 的计划任务。</P><P><B>脚本代码</B></P><PRE class=codeSample>strComputer = "."
Set objWMIService = GetObject("winmgmts:" _
    & "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2")
Set objInstance = objWMIService.Get("Win32_ScheduledJob.JobID=1")
err = objInstance.Delete
Wscript.Echo err
</PRE></PRE></PRE></PRE>

页: [1]
© 1999-2008 EvilOctal Security Team