[分享]批处理查找注册表满足三个条件的子项

Batcher

【问题描述】

通过CMD文件判断 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\的子项中满足这3个条件：
DependOnService是“FltMgr”
Group是“FSFilter Activity Monitor”
ImagePath是“\??\”开头的

Batcher

【解决方案】

test-1.bat

1. @echo off
   
2. cd /d "%~dp0"
   
3. set "OutFile=1.log"
   
4. type nul >"%OutFile%"
   
5. for /f "delims=" %%i in ('reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services"') do (
   
6.     for /f "delims=" %%j in ('reg query "%%i" ^| findstr /c:"DependOnService    REG_MULTI_SZ    FltMgr" /c:"Group    REG_SZ    FSFilter Activity Monitor" /c:"ImagePath    REG_EXPAND_SZ    \\??\" ^| find /v /c ""') do (
   
7.         echo [%%j] %%i
   
8.         if %%j equ 3 (
   
9.             >>"%OutFile%" echo,%%i
   
10.         )
    
11.     )
    
12. )
    
13. echo --------------------------------------------------
    
14. type "%OutFile%"
    
15. pause

复制代码