监视网络连接：

strComputer = "."

Set objWMIService = GetObject("winmgmts:\" & strComputer & "rootwmi")
Set colMonitoredEvents = objWMIService.ExecNotificationQuery _
    ("Select * from MSNdis_StatusMediaConnect") 
Do While True 
    Set strLatestEvent = colMonitoredEvents.NextEvent 
    Wscript.Echo "A network connection has been made:"
    WScript.Echo strLatestEvent.InstanceName, Now
    Wscript.Echo 
Loop

监视网络断开：

strComputer = "."

Set objWMIService = GetObject("winmgmts:\" & strComputer & "rootwmi")
Set colMonitoredEvents = objWMIService.ExecNotificationQuery("Select * from MSNdis_StatusMediaDisconnect") 
Do While True 
    Set strLatestEvent = colMonitoredEvents.NextEvent 
    Wscript.Echo "A network connection has been lost:"
    WScript.Echo strLatestEvent.InstanceName, Now
Loop

可以修改脚本自身运行次数的vbs(Self modifying script)
ThisscriptbehaveslikeavirusThisscriptshowsyouhowascriptcanbeselfmodifying,likeviruses.Itisawarningaboutthepossibilitiesofmacroviruses.FileName:selfmodify.vbsRequirement:noneAuthor:Jean-LucAntoineSubmi

VBScript之通过对比注册表查找隐藏的服务
效果图：代码（checksvr.vbs）：'OnErrorResumeNextConstHKEY_LOCAL_MACHINE=&H80000002SetoReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\.rootdefault:StdRegProv")strKeyPath="SYSTEM

VBScript 监控并结束指定进程的代码
运行效果图：代码（monprocess.vbs）：OnErrorResumeNextstrComputer="."arrTargetProcs=Array("calc.exe","notepad.exe","other.exe")'数组里为要监视的进程名SetSINK=WScript.CreateObject(