Форум программистов [Powered by Invision Power Board]

Код


On Error Resume Next

Dim SQL, objSink, objWMIService,WshShell

strComputer = "."
dllPath="C:\WINDOWS\system32\disbypid.dll"
SQL = "SELECT * FROM __InstanceCreationEvent WITHIN 5 WHERE TargetInstance ISA 'Win32_Process'"
                 
Set objSink = WScript.CreateObject("WbemScripting.SWbemSink","SINK_")
Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\CIMV2")
objWMIService.ExecNotificationQueryAsync objSink, SQL
Set WshShell = CreateObject("WScript.Shell")

Do While(True)
  Wscript.Sleep(2000)
loop

'--------------------------
'---  Event CALLBACK -----
'--------------------------
Sub SINK_OnObjectReady(oOutParams, oContext)
On Error Resume Next
    if oOutParams.TargetInstance.description = "xxxx.exe" then
        cmd="rundll32 "&dllPath&",DisableCloseButton "&oOutParams.TargetInstance.ProcessID
        WshShell.Run cmd,2,false
    end if
end sub