ProcessMagnifier.vbs进程查看

2019-01-16 06:03:01刘景俊

OBJWMIProcess = GetObject("winmgmts:.rootcimv2").ExecQuery("Select * From Win32_Process")   
 WScript.Echo "Name:               Priority:   PID:    Owner:" &vbTab&vbTab&"ExecutablePath: "  
WScript.Echo("---------------------------------------------------------------------------------------")   
For Each OBJProcess In OBJWMIProcess   
 MyOBJProcessName=OBJProcess.Name&"                    "  
    colProperties = OBJProcess.GetOwner(strNameOfUser, strUserDomain)   
 WScript.Echo Mid(MyOBJProcessName,1,20) &vbTab& OBJProcess.Priority &vbTab& OBJProcess.ProcessID &vbTab& strNameOfUser &vbTab&vbTab& OBJProcess.ExecutablePath   
Next  

WScript.Sleep(5000)   
WScript.Echo(vbCrLf)   
WScript.Echo("当前正在运行的进程以及其加载的模块详细信息树状结构如下:")   
WScript.Echo(vbCrLf)   
WScript.Sleep(3000)   
WScript.Echo vbTab&vbTab&vbTab&vbTab&vbTab&vbTab&vbTab&vbTab&vbTab&vbTab&vbTab&vbTab&vbTab&vbTab&vbTab&vbTab& vbTab&"创建时间             文件制造商"  

OBJWMIService = GetObject("winmgmts:{impersonationLevel=impersonate}!.rootcimv2")   
OBJRefresher = CreateObject("WbemScripting.SWbemRefresher")   
colItems = OBJRefresher.AddEnum(OBJWMIService, "Win32_PerfFormattedData_PerfProc_FullImage_Costly").ObjectSet   
OBJRefresher.Refresh()   
For Each OBJItem In colItems   
    Dim originalPath, ModulePath, WMIPathMode, FileManufacturer, LCaseModulePath   
    Dim FileExtension, mark, MyLCaseModulePath, FinalModulePath   
    originalPath = OBJItem.Name  
    ModulePath = Split(originalPath, "/")   
    WMIPathMode = Replace(ModulePath(1), "", "")   
    OBJWMI = GetObject("winmgmts:.rootCIMV2")   
    colManufacturer = OBJWMI.ExecQuery("SELECT * FROM CIM_DataFile Where Name='" & WMIPathMode & "'")   
    For Each OBJManufacturer In colManufacturer