VBScript 监控磁盘更改事件实现代码

来自微软官方，写USB小偷脚本是最好不过的了

 
strComputer = "." 
Set objWMIService = GetObject("winmgmts:" _ 
& "{impersonationLevel=impersonate}!" & strComputer & "rootcimv2") 
Set colMonitoredEvents = objWMIService. _ 
ExecNotificationQuery("Select * from Win32_VolumeChangeEvent") 
Do 
Set objLatestEvent = colMonitoredEvents.NextEvent 
Wscript.Echo objLatestEvent.DriveName 
Wscript.Echo objLatestEvent.EventType 
Wscript.Echo objLatestEvent.Time_Created 
Loop