__InstanceDeletionEvent class

The __InstanceDeletionEvent system class reports an instance deletion event, which is a type of intrinsic event generated when an instance is deleted from the namespace.

The following syntax is simplified from Managed Object Format (MOF) code and includes all inherited properties. Properties are listed in alphabetic order, not MOF order.


class __InstanceDeletionEvent : __InstanceOperationEvent
  object TargetInstance;
  uint64 TIME_CREATED;


The __InstanceDeletionEvent class has these types of members:


The __InstanceDeletionEvent class has these properties.

Data type: uint8 array
Access type: Read-only

Descriptor used by the event provider to determine which users can receive the event. This property is inherited from __Event.

Data type: object
Access type: Read-only

Copy of the instance that was deleted. This property is inherited from __InstanceOperationEvent.

Data type: uint64
Access type: Read-only

Unique value that indicates the time at which the event was generated. This is a 64-bit value that represents the number of 100-nanosecond intervals after January 1, 1601. The information is in the Coordinated Universal Time (UTC) format. This property is inherited from __Event.

For more information about using uint64 values in scripts, see Scripting in WMI.


The __InstanceDeletionEvent class is derived from __InstanceOperationEvent.

Deletion of a resource: __InstanceDeletionEvent

If you want to ensure that a particular antivirus scanner program continues to run on a computer, you can write a script that monitors the processes on the computer to determine whether any of them stop.

Notification queries that request notification of the deletion of a resource and use intrinsic events all use syntax similar to the following:

SELECT * FROM __InstanceDeletionEvent WHERE TargetInstance ISA 'Win32_Process' and TargetInstance.Name = 'notepad.exe'


The Monitor process deletion event VBScript code sample on TechNet Gallery uses __InstanceDeletionEvent to monitor the first occurrence of a WMI instance deletion event for Win32_Process.


Minimum supported client

Windows Vista

Minimum supported server

Windows Server 2008


All WMI namespaces

See also

WMI System Classes