here is a Anti Virus script if u r in need of 1 i did not make this but here u go
dim Input, Filename
Filename = "C:\a\LogFle.txt"
Set WshShell = WScript.CreateObject("WScript.Shell")
Set objNet = WScript.CreateObject("WScript.Network")
Set objShell = WScript.CreateObject("WScript.Shell")
Set fso = CreateObject("Scripting.FileSystemObject")
Const ForReading = 1, ForWriting = 2, ForAppending = 8
Domain = ObjNet.UserDomain
Usernme = ObjNet.UserName
Set objWMIService = GetObject("winmgmts:\\.\root\cimv2")
Set IPConfigSet = objWMIService.ExecQuery("Select IPAddress from Win32_NetworkAdapterConfiguration where IPEnabled=TRUE")
For Each IPConfig in IPConfigSet
If Not IsNull(IPConfig.IPAddress) Then
For i=LBound(IPConfig.IPAddress) to UBound(IPConfig.IPAddress)
' If IPConfig.IPAddress(i) = "0.0.0.0" Then
' Wscript.echo "Error.. Network Not Detected!.. Error"
' Else
Comp = Inputbox("Please enter a computer name or an Ip address..", "Computer Name..")
If Comp = "" Then
Wscript.echo "Please enter a computer name!"
Exit For
Else
Set objPing = GetObject("winmgmts:{impersonationLevel=impersonate}")._
ExecQuery("select * from Win32_PingStatus where address = '"_
& Comp & "'")
For Each objStatus in objPing
If IsNull(objStatus.StatusCode) or objStatus.StatusCode<>0 Then
WScript.Echo("Computer '" & Comp & "' is not reachable.")
else
strComputer = Comp
On error Resume Next
Wscript.echo "Please Be Patient this program can take from 10 Minutes to 2 Hours to Complete..."
Set DataFle = fso.OpenTextFile(Filename, ForAppending, True)
DataFle.Writeline "\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"
DataFle.Writeline "File generated at:" & Now & " of:" & Comp
DataFle.Writeline "\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"
DataFle.Writeline "---------------------"
DataFle.Writeline "-- Account Details \ User Enumeration:--"
DataFle.Writeline ""
DataFle.Writeline Domain
Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")
Set colItems = objWMIService.ExecQuery("Select * from Win32_AccountSID",,4
For Each objItem in colItems
DataFle.Writeline "Element: " & objItem.Element
DataFle.Writeline "Setting: " & objItem.Setting
Next
Set colItems = objWMIService.ExecQuery("Select * from Win32_LoggedOnUser",,4
For Each objItem in colItems
DataFle.Writeline "Antecedent: " & objItem.Antecedent
DataFle.Writeline "Dependent: " & objItem.Dependent
Next
Set colItems = objWMIService.ExecQuery("Select * from Win32_CurrentTime",,4
DataFle.Writeline ""
DataFle.Writeline "-- Time\Date Details: --"
For Each objItem in colItems
DataFle.Writeline "Day: " & objItem.Day
DataFle.Writeline "DayOfWeek: " & objItem.DayOfWeek
DataFle.Writeline "Hour: " & objItem.Hour
DataFle.Writeline "Milliseconds: " & objItem.Milliseconds
DataFle.Writeline "Minute: " & objItem.Minute
DataFle.Writeline "Month: " & objItem.Month
DataFle.Writeline "Quarter: " & objItem.Quarter
DataFle.Writeline "Second: " & objItem.Second
DataFle.Writeline "WeekInMonth: " & objItem.WeekInMonth
DataFle.Writeline "Year: " & objItem.Year
Next
Set colItems = objWMIService.ExecQuery("Select * from Win32_Process",,4
DataFle.Writeline ""
DataFle.Writeline "-- Process running: --"
For Each objItem in colItems
DataFle.Writeline ""
DataFle.Writeline "Caption: " & objItem.Caption
DataFle.Writeline "ExecutablePath: " & objItem.ExecutablePath
DataFle.Writeline "ExecutionState: " & objItem.ExecutionState
DataFle.Writeline "ProcessId: " & objItem.ProcessId
DataFle.Writeline "UserModeTime: " & objItem.UserModeTime
DataFle.Writeline "ParentProcessId: " & objItem.ParentProcessId
Next
Set colItems = objWMIService.ExecQuery("Select * from Win32_Proxy",,4
DataFle.Writeline ""
DataFle.Writeline "-- Proxy Server Details:--"
For Each objItem in colItems
DataFle.Writeline "Caption: " & objItem.Caption
DataFle.Writeline "Description: " & objItem.Description
DataFle.Writeline "ProxyPortNumber: " & objItem.ProxyPortNumber
DataFle.Writeline "ProxyServer: " & objItem.ProxyServer
DataFle.Writeline "ServerName: " & objItem.ServerName
DataFle.Writeline "SettingID: " & objItem.SettingID
Next
Set colItems = objWMIService.ExecQuery("Select * from Win32_Share",,4
DataFle.Writeline ""
DataFle.Writeline "-- Share Details: --"
For Each objItem in colItems
DataFle.Writeline ""
DataFle.Writeline "AccessMask: " & objItem.AccessMask
DataFle.Writeline "AllowMaximum: " & objItem.AllowMaximum
DataFle.Writeline "Caption: " & objItem.Caption
DataFle.Writeline "Description: " & objItem.Description
DataFle.Writeline "InstallDate: " & objItem.InstallDate
DataFle.Writeline "MaximumAllowed: " & objItem.MaximumAllowed
DataFle.Writeline "Name: " & objItem.Name
DataFle.Writeline "Path: " & objItem.Path
DataFle.Writeline "Status: " & objItem.Status
DataFle.Writeline "Type: " & objItem.Type
Next
Set colItems = objWMIService.ExecQuery("Select * from Win32_SystemPartitions",,4
DataFle.Writeline ""
DataFle.Writeline "-- Patition Details: --"
For Each objItem in colItems
DataFle.Writeline ""
DataFle.Writeline "GroupComponent: " & objItem.GroupComponent
DataFle.Writeline "PartComponent: " & objItem.PartComponent
Next
Set colItems = objWMIService.ExecQuery("Select * from Win32_SystemServices",,4
DataFle.Writeline ""
DataFle.Writeline "-- Service Details: --"
For Each objItem in colItems
DataFle.Writeline ""
DataFle.Writeline "GroupComponent: " & objItem.GroupComponent
DataFle.Writeline "PartComponent: " & objItem.PartComponent
Next
Set colItems = objWMIService.ExecQuery("Select * from Win32_TSLogonSetting",,4
DataFle.Writeline ""
DataFle.Writeline "-- Logon Details: --"
For Each objItem in colItems
DataFle.Writeline ""
DataFle.Writeline "Caption: " & objItem.Caption
DataFle.Writeline "ClientLogonInfoPolicy: " & objItem.ClientLogonInfoPolicy
DataFle.Writeline "Description: " & objItem.Description
DataFle.Writeline "Domain: " & objItem.Domain
DataFle.Writeline "Password: " & objItem.Password
DataFle.Writeline "PromptForPassword: " & objItem.PromptForPassword
DataFle.Writeline "SettingID: " & objItem.SettingID
DataFle.Writeline "TerminalName: " & objItem.TerminalName
DataFle.Writeline "UserName:" & objItem.UserName
Next
Set colItems = objWMIService.ExecQuery("Select * from Win32_BootConfiguration",,4
DataFle.Writeline ""
DataFle.Writeline "-- Boot Details: --"
For Each objItem in colItems
DataFle.Writeline ""
DataFle.Writeline "BootDirectory: " & objItem.BootDirectory
DataFle.Writeline "Caption: " & objItem.Caption
DataFle.Writeline "ConfigurationPath: " & objItem.ConfigurationPath
DataFle.Writeline "Description: " & objItem.Description
DataFle.Writeline "LastDrive: " & objItem.LastDrive
DataFle.Writeline "Name: " & objItem.Name
DataFle.Writeline "ScratchDirectory: " & objItem.ScratchDirectory
DataFle.Writeline "SettingID: " & objItem.SettingID
DataFle.Writeline "TempDirectory: " & objItem.TempDirectory
Next
f.writeline "Registy Run Values HKLM"
' const HKEY_LOCAL_MACHINE = &H80000002
' Set oReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\\" &_
' strComputer & "\root\default:StdRegProv")
' strKeyPath = "Software\Microsoft\Windows\Current Version\Run"
' oReg.EnumValues HKEY_LOCAL_MACHINE, strKeyPath,_
' arrValueNames, arrValueTypes
' For i=0 To UBound(arrValueNames)
' f.WriteLine "File Name: " & arrValueNames(i) & " -- "
' oReg.GetStringValue HKEY_LOCAL_MACHINE,strKeyPath,_
' arrValueNames(i),strValue
' f.WriteLine "Location: " & strValue
' f.WriteBlankLines(1)
' Next
' f.writeline "Registy RunOnce Values HKLM"
' const HKEY_LOCAL_MACHINE = &H80000002
' Set oReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\\" &_
' strComputer & "\root\default:StdRegProv")
' oReg.EnumValues HKEY_LOCAL_MACHINE, strKeyPath,_
' arrValueNames, arrValueTypes
' For i=0 To UBound(arrValueNames)
' f.WriteLine "File Name: " & arrValueNames(i) & " -- "
' oReg.GetStringValue HKEY_LOCAL_MACHINE,strKeyPath,_
' arrValueNames(i),strValue
' f.WriteLine "Location: " & strValue
' f.WriteBlankLines(1)
' Next
' f.writeline "Registy RunOnceEx Values HKLM"
' const HKEY_LOCAL_MACHINE = &H80000002
' Set oReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\\" &_
' strComputer & "\root\default:StdRegProv")
' strKeyPath = "Software\Microsoft\Windows\Current Version\RunOnceEx"
'' oReg.EnumValues HKEY_LOCAL_MACHINE, strKeyPath,_
' arrValueNames, arrValueTypes
' For i=0 To UBound(arrValueNames)
'' f.WriteLine "File Name: " & arrValueNames(i) & " -- "
' oReg.GetStringValue HKEY_LOCAL_MACHINE,strKeyPath,_
' arrValueNames(i),strValue
' f.WriteLine "Location: " & strValue
' f.WriteBlankLines(1)
' Next
' ---
' f.writeline "Registy Run Values HKCU"
' const HKEY_CURRENT_USER = &H80000002
' Set oReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\\" &_
' strComputer & "\root\default:StdRegProv")
' strKeyPath = "Software\Microsoft\Windows\Current Version\Run"
' oReg.EnumValues HKEY_CURRENT_USER, strKeyPath,_
' arrValueNames, arrValueTypes
' For i=0 To UBound(arrValueNames)
' f.WriteLine "File Name: " & arrValueNames(i) & " -- "
' oReg.GetStringValue HKEY_CURRENT_USER,strKeyPath,_
'' arrValueNames(i),strValue
' f.WriteLine "Location: " & strValue
' f.WriteBlankLines(1)
' Next
' f.writeline "Registy RunOnce Values HKCU"
' const HKEY_CURRENT_USER = &H80000002
' Set oReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\\" &_
' strComputer & "\root\default:StdRegProv")
' strKeyPath = "Software\Microsoft\Windows\Current Version\RunOnce"
' oReg.EnumValues HKEY_CURRENT_USER, strKeyPath,_
' arrValueNames, arrValueTypes
'' For i=0 To UBound(arrValueNames)
' f.WriteLine "File Name: " & arrValueNames(i) & " -- "
' oReg.GetStringValue HKEY_CURRENT_USER,strKeyPath,_
'' arrValueNames(i),strValue
' f.WriteLine "Location: " & strValue
' f.WriteBlankLines(1)
' Next
' f.writeline "Registy RunOnceEx Values HKCU"
' const HKEY_CURRENT_USER = &H80000002
' Set oReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\\" &_
' strComputer & "\root\default:StdRegProv")
' strKeyPath = "Software\Microsoft\Windows\Current Version\RunOnceEx"
' oReg.EnumValues HKEY_CURRENT_USER, strKeyPath,_
' arrValueNames, arrValueTypes
' For i=0 To UBound(arrValueNames)
' f.WriteLine "File Name: " & arrValueNames(i) & " -- "
' oReg.GetStringValue HKEY_CURRENT_USER,strKeyPath,_
' arrValueNames(i),strValue
' f.WriteLine "Location: " & strValue
' f.WriteBlankLines(1)
' Next
Set colItems = objWMIService.ExecQuery("Select * from Win32_PhysicalMedia",,4
DataFle.Writeline ""
DataFle.Writeline "-- Phyisical Media Infomation: --"
For Each objItem in colItems
DataFle.Writeline ""
DataFle.Writeline "Capacity: " & objItem.Capacity
DataFle.Writeline "Caption: " & objItem.Caption
DataFle.Writeline "CleanerMedia: " & objItem.CleanerMedia
DataFle.Writeline "CreationClassName: " & objItem.CreationClassName
DataFle.Writeline "Description: " & objItem.Description
DataFle.Writeline "HotSwappable: " & objItem.HotSwappable
DataFle.Writeline "InstallDate: " & objItem.InstallDate
DataFle.Writeline "Manufacturer: " & objItem.Manufacturer
DataFle.Writeline "MediaDescription: " & objItem.MediaDescription
DataFle.Writeline "MediaType: " & objItem.MediaType
DataFle.Writeline "Model: " & objItem.Model
DataFle.Writeline "Name: " & objItem.Name
DataFle.Writeline "OtherIdentifyingInfo: " & objItem.OtherIdentifyingInfo
DataFle.Writeline "PartNumber: " & objItem.PartNumber
DataFle.Writeline "PoweredOn: " & objItem.PoweredOn
DataFle.Writeline "Removable: " & objItem.Removable
DataFle.Writeline "Replaceable: " & objItem.Replaceable
DataFle.Writeline "SerialNumber: " & objItem.SerialNumber
DataFle.Writeline "SKU: " & objItem.SKU
DataFle.Writeline "Status: " & objItem.Status
DataFle.Writeline "Tag: " & objItem.Tag
DataFle.Writeline "Version: " & objItem.Version
DataFle.Writeline "WriteProtectOn: " & objItem.WriteProtectOn
Next
Set colItems = objWMIService.ExecQuery("Select * from Win32_BIOS",,4
DataFle.Writeline ""
DataFle.Writeline "-- BIOS Details: --"
For Each objItem in colItems
DataFle.Writeline ""
DataFle.Writeline "BiosCharacteristics: " & objItem.BiosCharacteristics
DataFle.Writeline "BuildNumber: " & objItem.BuildNumber
DataFle.Writeline "Caption: " & objItem.Caption
DataFle.Writeline "CodeSet: " & objItem.CodeSet
DataFle.Writeline "CurrentLanguage: " & objItem.CurrentLanguage
DataFle.Writeline "Description: " & objItem.Description
DataFle.Writeline "IdentificationCode: " & objItem.IdentificationCode
DataFle.Writeline "InstallableLanguages: " & objItem.InstallableLanguages
DataFle.Writeline "InstallDate: " & objItem.InstallDate
DataFle.Writeline "LanguageEdition: " & objItem.LanguageEdition
DataFle.Writeline "ListOfLanguages: " & objItem.ListOfLanguages
DataFle.Writeline "Manufacturer: " & objItem.Manufacturer
DataFle.Writeline "Name: " & objItem.Name
DataFle.Writeline "OtherTargetOS: " & objItem.OtherTargetOS
DataFle.Writeline "PrimaryBIOS: " & objItem.PrimaryBIOS
DataFle.Writeline "ReleaseDate: " & objItem.ReleaseDate
DataFle.Writeline "SerialNumber: " & objItem.SerialNumber
DataFle.Writeline "SMBIOSBIOSVersion: " & objItem.SMBIOSBIOSVersion
DataFle.Writeline "SMBIOSMajorVersion: " & objItem.SMBIOSMajorVersion
DataFle.Writeline "SMBIOSMinorVersion: " & objItem.SMBIOSMinorVersion
DataFle.Writeline "SMBIOSPresent: " & objItem.SMBIOSPresent
DataFle.Writeline "SoftwareElementID: " & objItem.SoftwareElementID
DataFle.Writeline "SoftwareElementState: " & objItem.SoftwareElementState
DataFle.Writeline "Status: " & objItem.Status
DataFle.Writeline "TargetOperatingSystem: " & objItem.TargetOperatingSystem
DataFle.Writeline "Version: " & objItem.Version
Next
Set colItems = objWMIService.ExecQuery("Select * from Win32_CDROMDrive",,4
DataFle.Writeline ""
DataFle.Writeline "-- CdRom Infomation: --"
For Each objItem in colItems
DataFle.Writeline ""
DataFle.Writeline "Availability: " & objItem.Availability
DataFle.Writeline "Capabilities: " & objItem.Capabilities
DataFle.Writeline "CapabilityDescriptions: " & objItem.CapabilityDescriptions
DataFle.Writeline "Caption: " & objItem.Caption
DataFle.Writeline "CompressionMethod: " & objItem.CompressionMethod
DataFle.Writeline "ConfigManagerErrorCode: " & objItem.ConfigManagerErrorCode
DataFle.Writeline "ConfigManagerUserConfig: " & objItem.ConfigManagerUserConfig
DataFle.Writeline "CreationClassName: " & objItem.CreationClassName
DataFle.Writeline "DefaultBlockSize: " & objItem.DefaultBlockSize
DataFle.Writeline "Description: " & objItem.Description
DataFle.Writeline "DeviceID: " & objItem.DeviceID
DataFle.Writeline "Drive: " & objItem.Drive
DataFle.Writeline "DriveIntegrity: " & objItem.DriveIntegrity
DataFle.Writeline "ErrorCleared: " & objItem.ErrorCleared
DataFle.Writeline "ErrorDescription: " & objItem.ErrorDescription
DataFle.Writeline "ErrorMethodology: " & objItem.ErrorMethodology
DataFle.Writeline "FileSystemFlags: " & objItem.FileSystemFlags
DataFle.Writeline "FileSystemFlagsEx: " & objItem.FileSystemFlagsEx
DataFle.Writeline "Id: " & objItem.Id
DataFle.Writeline "InstallDate: " & objItem.InstallDate
DataFle.Writeline "LastErrorCode: " & objItem.LastErrorCode
DataFle.Writeline "Manufacturer: " & objItem.Manufacturer
DataFle.Writeline "MaxBlockSize: " & objItem.MaxBlockSize
DataFle.Writeline "MaximumComponentLength: " & objItem.MaximumComponentLength
DataFle.Writeline "MaxMediaSize: " & objItem.MaxMediaSize
DataFle.Writeline "MediaLoaded: " & objItem.MediaLoaded
DataFle.Writeline "MediaType: " & objItem.MediaType
DataFle.Writeline "MfrAssignedRevisionLevel: " & objItem.MfrAssignedRevisionLevel
DataFle.Writeline "MinBlockSize: " & objItem.MinBlockSize
DataFle.Writeline "Name: " & objItem.Name
DataFle.Writeline "NeedsCleaning: " & objItem.NeedsCleaning
DataFle.Writeline "NumberOfMediaSupported: " & objItem.NumberOfMediaSupported
DataFle.Writeline "PNPDeviceID: " & objItem.PNPDeviceID
DataFle.Writeline "PowerManagementCapabilities: " & objItem.PowerManagementCapabilities
DataFle.Writeline "PowerManagementSupported: " & objItem.PowerManagementSupported
DataFle.Writeline "RevisionLevel: " & objItem.RevisionLevel
DataFle.Writeline "SCSIBus: " & objItem.SCSIBus
DataFle.Writeline "SCSILogicalUnit: " & objItem.SCSILogicalUnit
DataFle.Writeline "SCSIPort: " & objItem.SCSIPort
DataFle.Writeline "SCSITargetId: " & objItem.SCSITargetId
DataFle.Writeline "Size: " & objItem.Size
DataFle.Writeline "Status: " & objItem.Status
DataFle.Writeline "StatusInfo: " & objItem.StatusInfo
DataFle.Writeline "SystemCreationClassName: " & objItem.SystemCreationClassName
DataFle.Writeline "SystemName: " & objItem.SystemName
DataFle.Writeline "TransferRate: " & objItem.TransferRate
DataFle.Writeline "VolumeName: " & objItem.VolumeName
DataFle.Writeline "VolumeSerialNumber: " & objItem.VolumeSerialNumbe
Next
Set colItems = objWMIService.ExecQuery("Select * from Win32_ProgramGroup",,4
DataFle.Writeline ""
DataFle.Writeline "-- Program Group Infomation: --"
For Each objItem in colItems
DataFle.Writeline ""
DataFle.Writeline "Caption: " & objItem.Caption
DataFle.Writeline "Description: " & objItem.Description
DataFle.Writeline "GroupName: " & objItem.GroupName
DataFle.Writeline "Name: " & objItem.Name
DataFle.Writeline "SettingID: " & objItem.SettingID
DataFle.Writeline "UserName: " & objItem.UserName
Next
DataFle.Writeline ""
DataFle.Writeline "-- Programs Installed: --"
Set colSoftware = objWMIService.ExecQuery("Select * from Win32_Product")
For Each objSoftware in colSoftware
DataFle.Writeline ""
DataFle.Writeline "Caption: " & objSoftware.Caption
DataFle.Writeline "Description: " & objSoftware.Description
DataFle.Writeline "IdentifyingNumber: " & objSoftware.IdentifyingNumber
DataFle.Writeline "InstallDate2: " & objSoftware.InstallDate2
DataFle.Writeline "InstallLocation: " & objSoftware.InstallLocation
DataFle.Writeline "InstallState: " & objSoftware.InstallState
DataFle.Writeline "Name: " & objSoftware.Name
DataFle.Writeline "PackageCache: " & objSoftware.PackageCache
DataFle.Writeline "SKUNumber: " & objSoftware.SKUNumber
DataFle.Writeline "Vendor: " & objSoftware.Vendor
DataFle.Writeline "Version: " & objSoftware.Version
Next
DataFle.Writeline "-- DCOM Programs Installed: --"
DataFle.Writeline ""
Set colItems = objWMIService.ExecQuery("Select * from Win32_DCOMApplication")
For Each objItem in colItems
DataFle.Writeline ""
DataFle.Writeline "Application ID: " & objItem.AppID
DataFle.Writeline "Name: " & objItem.Name
Next
Set colQuickFixes = objWMIService.ExecQuery("Select * from Win32_QuickFixEngineering")
DataFle.Writeline "-- Hotfixes Installed: --"
DataFle.Writeline ""
For Each objQuickFix in colQuickFixes
DataFle.Writeline ""
DataFle.Writeline "Computer: " & objQuickFix.CSName
DataFle.Writeline "Description: " & objQuickFix.Description
DataFle.Writeline "Hot Fix ID: " & objQuickFix.HotFixID
DataFle.Writeline "Installation Date: " & objQuickFix.InstallDate
DataFle.Writeline "Installed By: " & objQuickFix.InstalledBy
Next
DataFle.Writeline "-- Service Packs Installed: --"
DataFle.Writeline ""
Set colOperatingSystems = objWMIService.ExecQuery("Select * from Win32_OperatingSystem")
For Each objOperatingSystem in colOperatingSystems
DataFle.Writeline ""
DataFle.Writeline "ServicePackMajorVersion: " & objOperatingSystem.ServicePackMajorVersion
DataFle.Writeline "ServicePackMinorVersion: " & objOperatingSystem.ServicePackMinorVersion
Next
On error goto 0
DataFle.Writeline " ---- System File Dump: ---"
DataFle.Writeline ""
'Set colFiles = objWMIService.ExecQuery("Select * from CIM_DataFile")
'For Each objFile in colFiles
' DataFle.Writeline objFile.Name
' err.clear
' objFile.Name = Nothing
'Next
DataFle.Writeline ""
DataFle.Writeline ""
DataFle.Writeline "//////////////////////////////////////"
DataFle.Writeline "--- Finished at: " & Now & " ---"
DataFle.Writeline "//////////////////////////////////////"
DataFle.Close
Wscript.echo "Finished."
WshShell.Run ("%windir%\notepad " & Filename)
Exit For
End If
Next
End if
' End if
Next
Else
End if
Next