C# 利用WMI进行注册表监视
来源:互联网 发布:卖萌软件下载 编辑:程序博客网 时间:2024/05/19 16:35
VERSION 5.00
Begin VB.Form frmMain
Caption = "Form1"
ClientHeight = 3090
ClientLeft = 60
ClientTop = 450
ClientWidth = 4680
LinkTopic = "Form1"
ScaleHeight = 3090
ScaleWidth = 4680
StartUpPosition = 3 '窗口缺省
End
Attribute VB_Name = "frmMain"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Option Explicit
Private WithEvents objRegVaule As SWbemSink
Attribute objRegVaule.VB_VarHelpID = -1
Private WithEvents objRegTree As SWbemSink
Attribute objRegTree.VB_VarHelpID = -1
Private WithEvents objRegKey As SWbemSink
Attribute objRegKey.VB_VarHelpID = -1
Private Sub Form_Load()
Dim objSWbemServices As SWbemServices
'Set objRegVaule = New SWbemSink
Set objRegTree = New SWbemSink
Set objRegKey = New SWbemSink
Set objSWbemServices = GetObject("winmgmts:root/default")
'objSWbemServices.ExecNotificationQueryAsync objRegVaule, "SELECT * FROM RegistryValueChangeEvent WHERE ((Hive='HKEY_LOCAL_MACHINE' AND " & "KeyPath='SYSTEM//CurrentControlSet//Services//USBSTOR' AND ValueName='Start') Or (Hive='HKEY_LOCAL_MACHINE' AND " & "KeyPath='SYSTEM//CurrentControlSet//Control//StorageDevicePolicies' AND ValueName='WriteProtect'))"
objSWbemServices.ExecNotificationQueryAsync objRegTree, "SELECT * FROM RegistryTreeChangeEvent WHERE Hive='HKEY_LOCAL_MACHINE' AND " & "RootPath='SYSTEM//CurrentControlSet//Services//USBSTOR'"
' objSWbemServices.ExecNotificationQueryAsync objRegKey, "SELECT * FROM RegistryKeyChangeEvent WHERE Hive='HKEY_LOCAL_MACHINE' " & "AND KeyPath='SOFTWARE//Microsoft//Windows NT//CurrentVersion'"
End Sub
Private Sub Form_Unload(Cancel As Integer)
'objRegVaule.Cancel
objRegTree.Cancel
objRegKey.Cancel
End Sub
Private Sub objRegVaule_OnObjectReady(ByVal objWbemObject As WbemScripting.ISWbemObject, ByVal objWbemAsyncContext As WbemScripting.ISWbemNamedValueSet)
Dim swProperty As SWbemProperty, swPropertys As SWbemPropertySet
Set swPropertys = objWbemObject.Properties_
For Each swProperty In swPropertys
'On Error Resume Next
MsgBox swProperty.Name ' & vbNewLine & swProperty.Value
Next
End Sub
Private Sub objRegTree_OnObjectReady(ByVal objWbemObject As WbemScripting.ISWbemObject, ByVal objWbemAsyncContext As WbemScripting.ISWbemNamedValueSet)
Dim swProperty As SWbemProperty, swPropertys As SWbemPropertySet
Set swPropertys = objWbemObject.Properties_
' Dim objSWbemServices As SWbemServices
' Set objRegVaule = New SWbemSink
' Set objSWbemServices = GetObject("winmgmts:root/default")
' objSWbemServices.ExecNotificationQueryAsync objRegVaule, "SELECT * FROM RegistryValueChangeEvent WHERE ((Hive='HKEY_LOCAL_MACHINE' AND " & "KeyPath='SYSTEM//CurrentControlSet//Services//USBSTOR' AND ValueName='Start') Or (Hive='HKEY_LOCAL_MACHINE' AND " & "KeyPath='SYSTEM//CurrentControlSet//Control//StorageDevicePolicies' AND ValueName='WriteProtect'))"
For Each swProperty In swPropertys
'On Error Resume Next
MsgBox swProperty.Name & vbNewLine & swProperty.Value
Next
End Sub
Private Sub objRegKey_OnObjectReady(ByVal objWbemObject As WbemScripting.ISWbemObject, ByVal objWbemAsyncContext As WbemScripting.ISWbemNamedValueSet)
Dim swProperty As SWbemProperty, swPropertys As SWbemPropertySet
Set swPropertys = objWbemObject.Properties_
For Each swProperty In swPropertys
On Error Resume Next
MsgBox swProperty.Name & vbNewLine & swProperty.Value
Next
End Sub
- C# 利用WMI进行注册表监视
- C# 利用WMI进行日志监视
- C# 利用WMI进行日志监视
- VB 利用WMI进行日志监视
- VB 利用WMI进行进程监视
- VB 利用WMI进行USB监视
- VB 利用WMI进行PNP监视
- VB 利用WMI进行服务监视
- VB 利用WMI进行共享目录的监视
- VB 利用WMI进行外界设备插入分配盘符监视
- 利用WMI进行磁盘配额
- ring3下利用WMI监视进程创建(vc版)
- ring3下利用WMI监视进程创建(vc版)
- 利用C#操作注册表
- 使用 WMI 监视性能
- WMI监视进程启动
- 利用jvmstat进行jvm性能监视
- 利用jvmstat进行jvm性能监视
- vb.net2005 网页自动填写并提交
- VB 利用WMI进行进程监视
- java初学者必读-经验总结
- 解释一个struts2抛出的异常
- GridView终极用法(二)
- C# 利用WMI进行注册表监视
- GridView终极用法(三)
- VB 利用WMI进行USB监视
- GridView终极用法(四)
- 元素排序
- VB 利用WMI进行PNP监视
- GridView终极用法(五)
- http://www.javaeye.com
- VB 利用WMI进行共享目录的监视