计算机远程扫描,WMI 连接远程计算机并进行局域网进程扫描

On Error Resume Next

Dim myArray(231)

myArray(0)="smss.exe"

myArray(1)="csrss.exe"

myArray(2)="winlogon.exe"

myArray(3)="services.exe"

myArray(4)="lsass.exe"

myArray(5)="svchost.exe"

myArray(6)="ccsetmgr.exe"

myArray(7)="ccevtmgr.exe"

myArray(8)="spbbcsvc.exe"

myArray(9)="spoolsv.exe"

myArray(10)="repsvc.exe"

myArray(11)="defwatch.exe"

myArray(12)="dwrcs.exe"

myArray(13)="mdm.exe"

myArray(14)="savroam.exe"

myArray(15)="rtvscan.exe"

myArray(16)="ccmexec.exe"

myArray(17)="wmiprvse.exe"

myArray(18)="explorer.exe"

myArray(19)="dwrcst.exe"

myArray(20)="ccapp.exe"

myArray(21)="vptray.exe"

myArray(22)="outlook.exe"

myArray(23)="pcsws.exe"

myArray(24)="ctfmon.exe"

myArray(25)="msmsgs.exe"

myArray(26)="xdict.exe"

myArray(27)="pcscm.exe"

myArray(28)="winword.exe"

myArray(29)="wuauclt.exe"

myArray(30)="rundll32.exe"

myArray(31)="hkcmd.exe"

myArray(32)="excel.exe"

myArray(33)="wisptis.exe"

myArray(34)="wnwb.exe"

myArray(35)="lingoes.exe"

myArray(36)="acs_ln.exe"

myArray(37)="hpgs2wnd.exe"

myArray(38)="hpgs2wnf.exe"

myArray(39)="mnmsrvc.exe"

myArray(40)="conime.exe"

myArray(41)="wzqkpick.exe"

myArray(42)="smax4pnp.exe"

myArray(43)="dntus26.exe"

myArray(44)="wdkeymonitorccb.exe"

myArray(45)="wzcsldr2.exe"

myArray(46)="packone.exe"

myArray(47)="iexplore.exe"

myArray(48)="igfxpers.exe"

myArray(49)="igfxsrvc.exe"

myArray(50)="jusched.exe"

myArray(51)="jqs.exe"

myArray(52)="ati2evxx.exe"

myArray(53)="igfxtray.exe"

myArray(54)="winzip32.exe"

myArray(55)="ravmond.exe"

myArray(56)="inetinfo.exe"

myArray(57)="liveupdate360.exe"

myArray(58)="googlepinyindaemon.exe"

myArray(59)="eyefoo.exe"

myArray(60)="360sd.exe"

myArray(61)="googlepinyinservice.exe"

myArray(62)="360rp.exe"

myArray(63)="wscript.exe"

myArray(64)="notepad.exe"

myArray(65)="cmd.exe"

myArray(66)="fxcalendar.exe"

myArray(67)="payroll2.exe"

myArray(68)="antiu.exe"

myArray(69)="googletoolbarnotifier.exe"

myArray(70)="doscan.exe"

myArray(71)="userinit.exe"

myArray(72)="360antiarp.exe"

myArray(73)="sqlservr.exe"

myArray(74)="sqlbrowser.exe"

myArray(75)="sqlwriter.exe"

myArray(76)="ukeymonitor.exe"

myArray(77)="360se.exe"

myArray(78)="haikeysrv.exe"

myArray(79)="ekey_cli.exe"

myArray(80)="icbcbatchclient.exe"

myArray(81)="orderreminder.exe"

myArray(82)="msiexec.exe"

myArray(83)="360safe.exe"

myArray(84)="360tray.exe"

myArray(85)="applemobiledeviceservice.exe"

myArray(86)="asfipmon.exe"

myArray(87)="certregx.exe"

myArray(88)="cwblmsrv.exe"

myArray(89)="ebomain.exe"

myArray(90)="g2comm.exe"

myArray(91)="g2pre.exe"

myArray(92)="g2svc.exe"

myArray(93)="g2tray.exe"

myArray(94)="hpwuschd2.exe"

myArray(95)="iaanotif.exe"

myArray(96)="iaantmon.exe"

myArray(97)="ijplmsvc.exe"

myArray(98)="isuspm.exe"

myArray(99)="javaw.exe"

myArray(100)="ktengine.exe"

myArray(101)="lpdaemon.exe"

myArray(102)="msnmsgr.exe"

myArray(103)="mspview.exe"

myArray(104)="postgres.exe"

myArray(105)="pphbuf.exe"

myArray(106)="pphidpad.exe"

myArray(107)="rapimgr.exe"

myArray(108)="rj.communicationserver.exe"

myArray(109)="rj.easy.exe"

myArray(110)="rthdcpl.exe"

myArray(111)="safeboxtray.exe"

myArray(112)="seaport.exe"

myArray(113)="statusclient.exe"

myArray(114)="stormliv.exe"

myArray(115)="tssb.exe"

myArray(116)="wfcrun32.exe"

myArray(117)="ois.exe"

myArray(118)="mspscan.exe"

myArray(119)="fastaitimhelper.exe"

myArray(120)="wdfmgr.exe"

myArray(121)="360leakfixer.exe"

myArray(122)="360sdupd.exe"

myArray(123)="acdsee.exe"

myArray(124)="acrord32.exe"

myArray(125)="acrord32info.exe"

myArray(126)="adobearm.exe"

myArray(127)="adobeupdater.exe"

myArray(128)="agent.exe"

myArray(129)="agentserviceinvoker.exe"

myArray(130)="agentsvr.exe"

myArray(131)="alproc.exe"

myArray(132)="atiptaxx.exe"

myArray(133)="calc.exe"

myArray(134)="cbtray.exe"

myArray(135)="cidaemon.exe"

myArray(136)="cisvc.exe"

myArray(137)="clipsrv.exe"

myArray(138)="cnab5rpk.exe"

myArray(139)="custom.exe"

myArray(140)="cwbinhlp.exe"

myArray(141)="cwbtf.exe"

myArray(142)="cwbunplp.exe"

myArray(143)="davcdata.exe"

myArray(144)="defrag.exe"

myArray(145)="dfrgntfs.exe"

myArray(146)="dllhost.exe"

myArray(147)="drawobj.exe"

myArray(148)="dsagnt.exe"

myArray(149)="dumprep.exe"

myArray(150)="dvdlauncher.exe"

myArray(151)="dwhwizrd.exe"

myArray(152)="dwrcc.exe"

myArray(153)="dwwin.exe"

myArray(154)="epsmon.exe"

myArray(155)="fontserver.exe"

myArray(156)="freecell.exe"

myArray(157)="fxssvc.exe"

myArray(158)="handwriting.exe"

myArray(159)="haozip.exe"

myArray(160)="hasplms.exe"

myArray(161)="helpsvc.exe"

myArray(162)="hh.exe"

myArray(163)="hpbpro.exe"

myArray(164)="hpcmpmgr.exe"

myArray(165)="hpqscnvw.exe"

myArray(166)="hpztsb10.exe"

myArray(167)="hz_commsrv.exe"

myArray(168)="iexplor.exe"

myArray(169)="imeutil.exe"

myArray(170)="itvs.exe"

myArray(171)="kaqsvc.exe"

myArray(172)="kdwin.exe"

myArray(173)="ksdsvc.exe"

myArray(174)="kswebshield.exe"

myArray(175)="livesrv.exe"

myArray(176)="lservnt.exe"

myArray(177)="lucoms~1.exe"

myArray(178)="mashmaro.exe"

myArray(179)="mdnsresponder.exe"

myArray(180)="mplayerc.exe"

myArray(181)="msconfig.exe"

myArray(182)="msnchk.exe"

myArray(183)="msohtmed.exe"

myArray(184)="mspocrdc.exe"

myArray(185)="mstsc.exe"

myArray(186)="nclrssrv.exe"

myArray(187)="nclusbsrv.exe"

myArray(188)="netdde.exe"

myArray(189)="ocserv.exe"

myArray(190)="ose.exe"

myArray(191)="payroll2_jj.exe"

myArray(192)="penmin.exe"

myArray(193)="pg_ctl.exe"

myArray(194)="pinyinup.exe"

myArray(195)="postmaster.exe"

myArray(196)="ravcopy.exe"

myArray(197)="rdpclip.exe"

myArray(198)="reader_sl.exe"

myArray(199)="repgui.exe"

myArray(200)="scardsvr.exe"

myArray(201)="searchfilterhost.exe"

myArray(202)="searchindexer.exe"

myArray(203)="searchprotocolhost.exe"

myArray(204)="servicelayer.exe"

myArray(205)="shmgrate.exe"

myArray(206)="smartupg.exe"

myArray(207)="sndvol32.exe"

myArray(208)="spider.exe"

myArray(209)="spkrmon.exe"

myArray(210)="spnsrvnt.exe"

myArray(211)="srvalproc.exe"

myArray(212)="startupmonitor.exe"

myArray(213)="stormtray.exe"

myArray(214)="svcadmin.exe"

myArray(215)="systrayicon.exe"

myArray(216)="taskmgr.exe"

myArray(217)="tlntsvr.exe"

myArray(218)="tradecardse1.exe"

myArray(219)="txopshow.exe"

myArray(220)="valucore.exe"

myArray(221)="verclsid.exe"

myArray(222)="vpdaemon.exe"

myArray(223)="wcescomm.exe"

myArray(224)="wfica32.exe"

myArray(225)="wiaacmgr.exe"

myArray(226)="windowssearch.exe"

myArray(227)="winvnc.exe"

myArray(228)="wnie.exe"

myArray(229)="xcommsvr.exe"

myArray(230)="zhudongfangyu.exe"

Set objFSO = CreateObject("Scripting.FileSystemObject")

do

Set objPC = objFSO.OpenTextFile("C:\pc.txt", 1)

Set objRs = objFSO.OpenTextFile("C:\rs.txt", 8)

Do While objPC.AtEndOfStream = False

host = objPC.ReadLine

Set WshShell = WScript.CreateObject("WScript.Shell")

Ping = WshShell.Run("ping -n 1 " & host, 0, True)

if Ping = 0 then

WshShell.Run "net use \\" & host & "\ipc$ Aa123456

/user:ln-tf\liaobin", 0, True

set bag=GetObject("winmgmts:\\"& host &"\root\cimv2")

if bag <> nothing then

set pipe=bag.execquery("select ExecutablePath, Name from win32_process

where name like ‘%.exe‘")

for each i in pipe

bEx = false

For Each present In

myArray

if lcase(i.name) = present then

bEx =

true

end if

Next

if bEx = false

then

objRs.Writeline(now() & "|" & host & "|" & i.name

& "|" & i.ExecutablePath)

end if

next

else

objRs.Writeline(host & " is denied")

end if

set bag=nothing

WshShell.Run "net use \\" & host & "\ipc$ /delete", 0,

True

else

objRs.Writeline(host & " is outline")

end if

Set WshShell = nothing

Loop

objRs.Close

set objRs = nothing

objPC.Close

set objPC = nothing

wscript.sleep 60000

loop

Set objFSO = nothing

原文：http://www.cnblogs.com/lbnnbs/p/4784937.html