strComputer ="."
set ws = createobject("wscript.shell")
set objWMIService = getObject("winmgmts://" & strComputer & "/root/cimv2")
strQuery = "SELECT * FROM __InstanceOperationEvent WITHin 2 WHERE TargetInstance ISA 'Win32_Process'"
set objEventSource = objWMIService.ExecNotificationQuery(strQuery)
ws.popup "进程监控开始...",1,"静飞 进程监控",64
do
set objEventObject = objEventSource.NextEvent()
select case objEventObject.Path_.Class
Case"__InstanceCreationEvent" '启动新进程,结束进程
Set colProcessList=objWMIService.ExecQuery("Select * from Win32_Process Where Name='" & objEventObject.TargetInstance.Name & "'")
For Each objProcess in colProcessList
objProcess.Terminate()
Next
Case"__InstanceDeletionEvent" '进程被关闭
't = objEventObject.TargetInstance.CreationDate
'ti = mid(t,9,2) & ":" & mid(t,11,2) & ":" & mid(t,13,2)
'ts = datediff("s",ti,time)
'msg = "共运行" & ts \ 3600&"小时" & (ts mod 3600) \ 60 & "分钟" & (ts mod 3600) mod 60 & "秒"
'ws.popup "进程被关闭:" & vbcrlf & objEventObject.TargetInstance.Name&vbcrlf & msg,2,"静飞 进程监控",64
End select
loop
追问帮忙做下解决的东西吧,我给你加分