批处理如何识别系统服务?

@echo off&setlocal enabledelayedexpansion
::code by foxjl@bbs.bathome.net
mode con cols=150 lines=80
echo/&echo/
del %temp%\swenvservices.txt 2>nul&del %temp%\swenvloadedmodules.txt 2>nul
start msinfo32 /categories +swenvservices /report %temp%\swenvservices.txt
start msinfo32 /categories +swenvloadedmodules /report %temp%\swenvloadedmodules.txt
set/p=  数据准备中,请稍等.<nul
for /l %%a in (1,1,1000) do (
if exist %temp%\swenvservices.txt (if exist %temp%\swenvloadedmodules.txt (goto start))
 for %%i in (－ \ ^| /) do (
  for /l %%j in (1,1,21) do (set/p=<nul)
  set/p=%%i<nul&ping /n 1 127.1>nul
 )
)
:start
cls
for /f "skip=33 delims=  tokens=1-6" %%a in ('type "%temp%\swenvservices.txt"') do (
 set name=%%a
 for /f "tokens=1-2 delims=-/" %%x in ("%%f") do (
 set paths=%%~x
 set paths=!paths:"=!
 call :look
 )
)
pause>nul
:look
for /f "delims=  tokens=1-6" %%i in ('type "%temp%\swenvloadedmodules.txt"') do (
 if /i "%%n"=="!paths!" (echo.名称:!name!--路径:!paths!---制造制:%%m)
 )
goto :eof
复制代码

Dim FilePath,WMIPathMode
FilePath=InputBox("请输入文件全路径(例如以下路径格式)","文件路径","C:\windows\system32\user32.dll")
If FilePath <> "" Then
WMIPathMode=Replace(FilePath,"\","\\")
Set OBJWMI = GetObject("winmgmts:\\.\root\CIMV2")
Set colManufacturer = OBJWMI.ExecQuery("SELECT * FROM CIM_DataFile Where Name='" & WMIPathMode & "'")
    For Each OBJManufacturer In colManufacturer
        If Trim(OBJManufacturer.Manufacturer) <> "" Then
      MsgBox "文件全路径是: "&LCase(Trim(OBJManufacturer.Name))&chr(10)&"文件制造商是: "&Trim(OBJManufacturer.Manufacturer)
        Else 
          MsgBox "文件全路径是: "&LCase(Trim(OBJManufacturer.Name))&chr(10)&"文件制造商是:空"
        End If
    Next
End If
复制代码

wmic datafile where name="c:\\windows\\system32\\notepad.exe" get Manufacturer
复制代码

@echo off
cls
echo set OBJWMIService = GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\cimv2")>ServiceStatus.vbs
echo set colInstalledServices = OBJWMIService.ExecQuery("Select * From Win32_Service")>>ServiceStatus.vbs
echo For Each OBJService in colInstalledServices>>ServiceStatus.vbs 
echo Wscript.Echo OBJService.State ^& vbTab ^& OBJService.DisplayName>>ServiceStatus.vbs
echo Next>>ServiceStatus.vbs
cscript //nologo ServiceStatus.vbs >ServiceStatus.txt
for /f "skip=1 tokens=2 delims=:" %%i in ('find /v /c "" ServiceStatus.txt') do set total=%%i
for /f "skip=1 tokens=2 delims=:" %%a in ('find /i /c "running" ServiceStatus.txt') do set rcount=%%a
for /f "skip=1 tokens=2 delims=:" %%x in ('find /i /c "Stopped" ServiceStatus.txt') do set scount=%%x
ping -n 2 127.1 >nul 2>nul
echo 计算机系统里安装的服务总共有%total% 个。
echo.
ping -n 3 127.1 >nul 2>nul
echo 正在运行的服务有%rcount% 个。列表如下:
echo.
ping -n 3 127.1 >nul 2>nul
for /f "skip=2 delims=" %%k in ('find /i "running" ServiceStatus.txt') do echo %%k
ping -n 3 127.1 >nul 2>nul
echo.
echo 已经停止的服务有%scount% 个。列表如下:
echo.
ping -n 3 127.1 >nul 2>nul
for /f "skip=2 delims=" %%p in ('find /i "stopped" ServiceStatus.txt') do echo %%p
echo.
ping -n 3 127.1 >nul 2>nul

echo set OBJWMIService = GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\cimv2")>stoppable.vbs
echo set colServices = objWMIService.ExecQuery("Select * From Win32_Service Where AcceptStop = True")>>stoppable.vbs
echo For Each OBJService in colServices>>stoppable.vbs
echo Wscript.Echo OBJService.State ^& vbTab ^& OBJService.DisplayName>>stoppable.vbs
echo Next>>stoppable.vbs

cscript //nologo stoppable.vbs >stoppable.txt

for /f "skip=1 tokens=2 delims=:" %%e in ('find /i /c "running" stoppable.txt') do set srcount=%%e
echo 可以停止但是正在运行的服务有%srcount% 个。列表如下:
echo.
ping -n 3 127.1 >nul 2>nul
for /f "skip=2 delims=" %%g in ('find /i "running" stoppable.txt') do echo %%g
ping -n 3 127.1 >nul 2>nul
echo.
for /f "skip=1 tokens=2 delims=:" %%j in ('find /i /c "stopped" stoppable.txt') do set sscount=%%j
if not "%sscount%"==" 0" (
echo 可以停止而且已经停止的服务有%sscount% 个。列表如下:
echo.
ping -n 3 127.1 >nul 2>nul
for /f "skip=2 delims=" %%c in ('find /i "stopped" stoppable.txt') do echo %%c
) else echo 可以停止而且已经停止的服务有 0 个。
del ServiceStatus.vbs stoppable.vbs ServiceStatus.txt stoppable.txt >nul
pause
复制代码

@echo off
setlocal enabledelayedexpansion
set /p service_name=请输入服务名:
for /f "usebackq skip=1 tokens=1 delims= " %%a in (
`"wmic service where name='%service_name%' get PathName"`
) do (
set path_=%%a
set path_=!path_:\=\\!
)

for /f "usebackq skip=1 tokens=1 delims= " %%a in (
`"wmic datafile where name="!path_!" get Manufacturer"`
) do (
if /i "%%a" == "Microsoft" (
echo %service_name% 是系统服务.
) else (
echo %service_name% 不是系统服务.
)
)
pause>nul
复制代码