vbs查看系统开关机时间

如何获取XP系统的开机时间？

下面给出两种代码，保存到扩展名为vbs的文件中。具体哪个请根据自己需求决定。

一：根据系统日志，查看开机时间和关机时间，---- 使用弹出对话框的形式

Set WMI = GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\cimv2")
Set colLoggedEvents = WMI.ExecQuery("Select * from Win32_NTLogEvent Where Logfile = 'System' And EventCode = '6005' Or EventCode = '6006'")
For Each objEvent In colLoggedEvents
    Flag = Flag +1
    If Flag = 1 Then
        Wscript.Echo "本次开机时间: " & UTCtoNow(objEvent.TimeWritten)
    Else
    If (flag < 4) Then
        If (flag Mod 2) = 0 Then
            G = "上次关机时间：" & UTCtoNow(objEvent.TimeWritten) & vbNewLine
    Else
            K = "上次开机时间：" & UTCtoNow(objEvent.TimeWritten)
            Wscript.Echo K & vbNewLine & G
        End If
    End If
    End If
Next

'CreateObject("Wscript.Shell").Run "D:\Document\消费记录.xlsx",3,ture  '此处用于测试打开文件

Function UTCtoNow(nD)
    If Not IsNull(nD) Then
    Set SWDT = CreateObject("WbemScripting.SWbemDateTime")
    SWDT.Value = nD
    UTCtoNow = SWDT.GetVarDate(True)
    End If
End Function

二：下面在给出一个循环查找多次开机记录的方式，并且写到文件并打开  ---- 写文件形式

Set WMI = GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\cimv2")
Set colLoggedEvents = WMI.ExecQuery("Select * from Win32_NTLogEvent Where Logfile = 'System' And EventCode = '6005' Or EventCode = '6006'")

filePath="c:\startLog.txt"
set fso=createobject("scripting.filesystemobject")
set file=fso.opentextfile(filePath,2,true)
file.writeline "当前时间：" & Now
file.writeline "最近几次的开机和关机时间："
file.close
set file=fso.opentextfile("c:\startLog.txt",8,true)

Flag = 0
For Each objEvent In colLoggedEvents
    Flag = Flag +1
    msg = ""
    If (flag < 25) Then
        If (flag Mod 2) = 0 Then
            msg = "关机时间：" & UTCtoNow(objEvent.TimeWritten) & vbNewLine
        Else
            msg = "开机时间：" & UTCtoNow(objEvent.TimeWritten)
        End If
        file.writeline msg
    End If
Next
file.close
CreateObject("Wscript.Shell").Run filePath,3,ture

Function UTCtoNow(nD)
    If Not IsNull(nD) Then
    Set SWDT = CreateObject("WbemScripting.SWbemDateTime")
    SWDT.Value = nD
    UTCtoNow = SWDT.GetVarDate(True)
    End If
End Function

以下是经过优化代码：保存的文件根据时间生成，提示保存路径，以及增加换行

Set WMI = GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\cimv2")
Set colLoggedEvents = WMI.ExecQuery("Select * from Win32_NTLogEvent Where Logfile = 'System' And EventCode = '6005' Or EventCode = '6006'")

filePath="c:\startLog_" & FormateDateTime(Now,) & ".txt"
set fso=createobject("scripting.filesystemobject")
set file=fso.opentextfile(filePath,,true)
file.writeline "当前系统时间：" & Now
file.writeline "最近几次的开机和关机时间：" & vbNewLine
file.close
set file=fso.opentextfile(filePath,,true)
Wscript.Echo "开机日志已保存到：" & vbNewLine & filePath

Flag =
For Each objEvent In colLoggedEvents
    Flag = Flag +
    msg = ""
    If (flag < ) Then
        If (flag Mod ) =  Then
            msg = "关机时间：" & UTCtoNow(objEvent.TimeWritten) & vbNewLine
        Else
            msg = "开机时间：" & UTCtoNow(objEvent.TimeWritten)
        End If
        file.writeline msg
    End If
Next
file.close
CreateObject("Wscript.Shell").Run filePath,,ture

Function UTCtoNow(nD)
    If Not IsNull(nD) Then
    Set SWDT = CreateObject("WbemScripting.SWbemDateTime")
    SWDT.Value = nD
    UTCtoNow = SWDT.GetVarDate(True)
    End If
End Function

Function FormateDateTime(strTime,ParaType)
    select case ParaType
    Rem Type 1 is YYYYMMDDHHmmss
    case ""
    strTime = year(strTime) & right( "" & month(strTime),) & right( "" & day(strTime),) & right( "00 " & hour(strTime),) & right( "00 " & minute(strTime),) & right( "00 " & second(strTime),)
    Rem Type 2 is YYYYMMDD
    case ""
    strTime = year(strTime) & right( "" & month(strTime),) & right( "" & day(strTime),)
    Rem Type 3 is YYYY-MM-DD
    case ""
    strTime = year(strTime) & "-"& right( "" & month(strTime),) & "-"& right( "" & day(strTime),)
    Rem Type 4 is YYYY年MM月DD日
    case ""
    strTime = year(strTime) & "年"& right( "00 " & month(strTime),) & "月"& right( "" & day(strTime),)& "日 "
    Rem Type 5 is YYYY-MM-DD HH:mm:ss
    case ""
    strTime = year(strTime) & "-"& right( "00 " & month(strTime),) & "-"& right( "" & day(strTime),) & " "& right( "00 " & hour(strTime),) & ": "& right( "00 " & minute(strTime),) & ": "& right( "00 " & second(strTime),)
    end select
    FormateDateTime = strTime
end Function