J'aimerai extraire une partie de ses informations sous une autre forme :Processing Mount Point [C:\]
DirectoryName=RP1, Size=0, Type=11[FIRSTRUN], RestorePointName=Point de vérification système, RestorePointStatus=[VALID], Number=1l, Date=Monday July 14, 2008 12:48:3
DirectoryName=RP2, Size=0, Type=0[APPLICATION_INSTALL], RestorePointName=ComboFix created restore point, RestorePointStatus=[VALID], Number=2l, Date=Monday July 14, 2008 12:48:49
DirectoryName=RP3, Size=0, Type=10[DEVICE_DRIVER_CHANGE], RestorePointName=Scripted restore, RestorePointStatus=[VALID], Number=3l, Date=Tuesday July 15, 2008 7:27:23
DirectoryName=RP4, Size=0, Type=10[DEVICE_DRIVER_CHANGE], RestorePointName=Scripted restore, RestorePointStatus=[VALID], Number=4l, Date=Tuesday July 15, 2008 7:43:17
DirectoryName=RP5, Size=0, Type=0[APPLICATION_INSTALL], RestorePointName=Installed Vbsedit, RestorePointStatus=[VALID], Number=5l, Date=Tuesday July 15, 2008 10:5:23
DirectoryName=RP6, Size=0, Type=1[APPLICATION_UNINSTALL], RestorePointName=Revo Uninstaller's restore point - Vbsedit, RestorePointStatus=[VALID], Number=6l, Date=Tuesday July 15, 2008 10:7:23
DirectoryName=RP7, Size=0, Type=1[APPLICATION_UNINSTALL], RestorePointName=Removed Vbsedit, RestorePointStatus=[VALID], Number=7l, Date=Tuesday July 15, 2008 10:7:35
DirectoryName=RP8, Size=0, Type=10[DEVICE_DRIVER_CHANGE], RestorePointName=Scripted restore, RestorePointStatus=[VALID], Number=8l, Date=Tuesday July 15, 2008 11:31:33
DirectoryName=RP9, Size=0, Type=10[DEVICE_DRIVER_CHANGE], RestorePointName=Scripted restore, RestorePointStatus=[VALID], Number=9l, Date=Tuesday July 15, 2008 11:34:31
DirectoryName=RP10, Size=0, Type=10[DEVICE_DRIVER_CHANGE], RestorePointName=Scripted restore, RestorePointStatus=[VALID], Number=10l, Date=Tuesday July 15, 2008 11:38:45
DirectoryName=RP11, Size=0, Type=10[DEVICE_DRIVER_CHANGE], RestorePointName=Scripted restore, RestorePointStatus=[VALID], Number=11l, Date=Tuesday July 15, 2008 11:46:1
DirectoryName=RP12, Size=0, Type=10[DEVICE_DRIVER_CHANGE], RestorePointName=Scripted restore, RestorePointStatus=[VALID], Number=12l, Date=Tuesday July 15, 2008 11:49:0
DirectoryName=RP13, Size=0, Type=10[DEVICE_DRIVER_CHANGE], RestorePointName=Scripted restore, RestorePointStatus=[VALID], Number=13l, Date=Tuesday July 15, 2008 11:50:5
DirectoryName=RP14, Size=0, Type=10[DEVICE_DRIVER_CHANGE], RestorePointName=Scripted restore, RestorePointStatus=[VALID], Number=14l, Date=Tuesday July 15, 2008 11:50:53
DirectoryName=RP15, Size=0, Type=0[APPLICATION_INSTALL], RestorePointName=ComboFix created restore point, RestorePointStatus=[VALID], Number=15l, Date=Wednesday July 16, 2008 5:7:8
extraire les 5 derniers points de restauration par rapport à la date
extraire le nom du point de restauration Combofix created restore point et sa date et heure.
puis que le tout soit stocké dans un txt sous la forme :
Code : Tout sélectionner
---5 Derniers points de restaurations------
date/heure nom du point de restauration
cêst à dire comme ceci :
2008-07-13 14:00:00 Removed Vbsedit
2008-07-14 15:02:57 ComboFix created restore point
si tu ne vois pas dis le moi ou comprend pas
merci d'avance
edit :
j'ai trouvé ceci :
Code : Tout sélectionner
@echo off
cls
for /f "tokens=4" %%i in ('find "RestorePointName" SR-RP.txt') do set RestorePointName=%%i
for /f "tokens=7" %%j in ('find "date" SR-RP.txt') do set Date=%%j
echo %date% %RestorePointName% pause