VBScript 监控磁盘更改事件实现代码

来自微软官方，写usb小偷脚本是最好不过的了

strcomputer = "."
set objwmiservice = getobject("winmgmts:" _
& "{impersonationlevel=impersonate}!\\" & strcomputer & "\root\cimv2")
set colmonitoredevents = objwmiservice. _
execnotificationquery("select * from win32_volumechangeevent")
do
set objlatestevent = colmonitoredevents.nextevent
wscript.echo objlatestevent.drivename
wscript.echo objlatestevent.eventtype
wscript.echo objlatestevent.time_created
loop