**************************************** ****************************************
Rcls v1.05
Remote clear eventlogs script, by zzzevazzz
Welcome to visite www.isgrey.com
Usage:
Cscript c: \ scriptpath \ rcls. VBE targetip Username Password [lognamelist]
Lognamelist:
Logname1 [, logname2. ..] Clear specified logs
* |-A |-All clear all logs
-V |-View | null Enum log names
**************************************** ****************************************
Description: Windows Script for remotely clearing the target event log.
Feature: whether the target IPC $ is enabled or not.
Principle: directly access the target Windows Management Specification Service (Wmi ). This service is an important system service and is started by default.
Supported platforms: win2kpro win2kserver WINXP win.net
Usage:
Use the Script Host provided by windows in the Command Line ModeProgramCscript.exe calls the script, for example:
C: \> cscript rcls. VBE <target IP address> <username> <password> [log name list]
The log name list is the English name of the target event logs separated by commas.
For example, system logs, application logs, and security logs.
By default, these three types of logs are available in the system. You can use sys, app, and SEC as abbreviations.
For other logs, you must specify the full English name (take the registry as the standard ).
Using *,-A, or-all as parameters to replace the log name list will clear all the logs.
If you do not have a log name list or use-V or-view as parameters, you can list the English names of all log types of the target.
The empty password is represented by two double quotes.
If you want to use it locally, the IP address is 127.0.0.1 or a point (expressed by.). The user name and password are empty (expressed ).
If there are many logs, the response will be slow. Please wait.
This script is in the testing stage and is only available in the gray track forum. Do not publish it to the public. Thank you for your cooperation.
I provide limited technical support. If you have any questions, please send me a short message on the forum. My ID is zzzevazzz
The script has been simply encrypted and will not be published for the momentSource code. (I'm sorry to announce it)
Last Updated: 2002-8-24
Update record:
1.05 changed the output display format.
1.04 solve the response of some incorrect format parameters.
1.03 the abbreviated log name is added.
1.02 added the function of listing target log types and clearing specified logs.
1.01 solve the problem of empty passwords.
1.00 complete basic functions and clear all logs of the target.