2024年1月16日发(作者：)
C#在任务管理器里隐藏
这里说的只是在WINDOWS 任务管理器里隐藏,不是在进程里消失
例如我们要隐藏QQ进程,不在WINDOWS任务管理器里显示
使用方法
private skmgrList _List = new skmgrList();
private void Form1_Load(object sender, EventArgs e)
{
_sName = "";
_();
}
下面是全部的类
view plaincopy to clipboardprint?
namespace WindowsAPI
{
///
/// 在WINDOWS任务管理器里 不显示进程
/// qq:116149
/// zgke@
///
public class HideTaskmgrList
{
private m_Time = new ();
private string m_ProcessName = "";
private int m_ProcessID = 0;
///
/// 进程名称
///
public string ProcessName { get { return m_ProcessName; } set { m_ProcessName = value; } }
///
/// 开始
///
public void Star()
{
m_d = true;
}
///
/// 停止
///
public void Stop()
{
m_d = false;
}
public HideTaskmgrList()
{
m_al = 1;
m_d += new dEventHandler(_Time_Elapsed);
}
void _Time_Elapsed(object sender, dEventArgs e)
{
HideTaskmgrListOfName(m_ProcessName);
}
///
/// 获取所有控件
///
///
///
///
private bool NetEnumControl(IntPtr p_Handle, int p_Param)
{
BUFFER _TextString = new BUFFER();
dowText(p_Handle, out _TextString, 256);
BUFFER _ClassName = new BUFFER();
ssName(p_Handle, out _ClassName, 255);
if (_ == "进程" && _ == "SysListView32")
{
Hide(p_Handle);
return false;
}
return true;
}
///
/// 隐藏
///
///
public void Hide(IntPtr p_ListViewIntPtr)
{
IntPtr _ControlIntPtr = p_ListViewIntPtr;
int _ItemCount = ssage(p_ListViewIntPtr, 0x1004, 0, 0);
sAccessType _Type;
_Type = S_VM_OPERATION |
S_VM_READ |
S_VM_WRITE;
IntPtr _ProcessIntPtr = ocess(_Type, 1, (uint)m_ProcessID);
IntPtr _Out = ;
for (int z = 0; z != _ItemCount; z++)
{
//分配一个内存地址 保存进程的应用程序名称
IntPtr _StrBufferMemory = lAllocEx(_ProcessIntPtr, 0, 255,
__COMMIT, __READWRITE);
byte[] _OutBytes = new byte[40]; //定义结构体 (LVITEM)
byte[] _StrIntPtrAddress = es(_32());
_OutBytes[20] = _StrIntPtrAddress[0];
_OutBytes[21] = _StrIntPtrAddress[1];
_OutBytes[22] = _StrIntPtrAddress[2];
_OutBytes[23] = _StrIntPtrAddress[3];
_OutBytes[24] = 255;
//给结构体分配内存
IntPtr _Memory = lAllocEx(_ProcessIntPtr, 0, _,
__COMMIT, __READWRITE);
//把数据传递给结构体 (LVITEM)
rocessMemory(_ProcessIntPtr, _Memory, _OutBytes, (uint)_,
out _Out);
//发送消息获取结构体数据
ssage(p_ListViewIntPtr, 0x102D, z, _Memory);
//获取结构体数据
ocessMemory(_ProcessIntPtr, _Memory, _OutBytes, (uint)_,
out _Out);
//获取结构体 pszText的地址
IntPtr _ValueIntPtr = new IntPtr(32(_OutBytes, 20));
byte[] _TextBytes = new byte[255]; //获取pszText的数据
ocessMemory(_ProcessIntPtr, _ValueIntPtr, _TextBytes, 255, out _Out);
//获取进程名称
string _ProcessText = ing(_TextBytes).Trim(new Char[] { '0' });
//释放内存
lFreeEx(_ProcessIntPtr, _StrBufferMemory, 0,
__RELEASE);
lFreeEx(_ProcessIntPtr, _Memory, 0,
__RELEASE);
if (_ProcessText == m_ProcessName)
{
ssage(p_ListViewIntPtr, 0x1008, z, 0);
}
}
}
///
/// 在WINDOWS任务管理器里隐藏一行 需要一直调用 会被任务管理器刷新出来
///
/// 名称 如
public void HideTaskmgrListOfName(string p_Name)
{
s[] _ProcessList = cessesByName("taskmgr");
for (int i = 0; i != _; i++)
{
if (_ProcessList[i].MainWindowTitle == "Windows 任务管理器")
{
m_ProcessID = _ProcessList[i].Id;
ndowsProc _EunmControl = new
ndowsProc(NetEnumControl);
ildWindows(_ProcessList[i].MainWindowHandle, _EunmControl, 0);
}
}
}
}
public class Win32API
{
public enum MEM_PAGE
{
PAGE_NOACCESS = 0x1,
PAGE_READONLY = 0x2,
PAGE_READWRITE = 0x4,
PAGE_WRITECOPY = 0x8,
PAGE_EXECUTE = 0x10,
PAGE_EXECUTE_READ = 0x20,
PAGE_EXECUTE_READWRITE = 0x40,
PAGE_EXECUTE_READWRITECOPY = 0x50,
PAGE_EXECUTE_WRITECOPY = 0x80,
PAGE_GUARD = 0x100,
PAGE_NOCACHE = 0x200,
PAGE_WRITECOMBINE = 0x400,
}
public enum MEM_COMMIT
{
MEM_COMMIT = 0x1000,
MEM_RESERVE = 0x2000,
MEM_DECOMMIT = 0x4000,
MEM_RELEASE = 0x8000,
MEM_FREE = 0x10000,
MEM_PRIVATE = 0x20000,
MEM_MAPPED = 0x40000,
MEM_RESET = 0x80000,
MEM_TOP_DOWN = 0x100000,
MEM_WRITE_WATCH = 0x200000,
MEM_PHYSICAL = 0x400000,
MEM_IMAGE = 0x1000000
}
[Flags]
public enum ProcessAccessType
{
PROCESS_TERMINATE = (0x0001),
PROCESS_CREATE_THREAD = (0x0002),
PROCESS_SET_SESSIONID = (0x0004),
PROCESS_VM_OPERATION = (0x0008),
PROCESS_VM_READ = (0x0010),
PROCESS_VM_WRITE = (0x0020),
PROCESS_DUP_HANDLE = (0x0040),
PROCESS_CREATE_PROCESS = (0x0080),
PROCESS_SET_QUOTA = (0x0100),
PROCESS_SET_INFORMATION = (0x0200),
PROCESS_QUERY_INFORMATION = (0x0400)
}
[StructLayout(tial, CharSet = )]
public struct STRINGBUFFER
{
[MarshalAs(Str, SizeConst = 512)]
public string szText;
}
public delegate bool EnumWindowsProc(IntPtr p_Handle, int p_Param);
[DllImport("")]
public static extern IntPtr OpenProcess(ProcessAccessType dwDesiredAccess, int bInheritHandle, uint dwProcessId);
[DllImport("")]
public static extern Int32 CloseHandle(IntPtr hObject);
[DllImport("")]
public static extern Int32 ReadProcessMemory(IntPtr hProcess, IntPtr lpBaseAddress, [In, Out] byte[] buffer, UInt32
size, out IntPtr lpNumberOfBytesRead);
[DllImport("")]
public static extern Int32 WriteProcessMemory(IntPtr hProcess, IntPtr lpBaseAddress, [In, Out] byte[] buffer, UInt32
size, out IntPtr lpNumberOfBytesWritten);
[DllImport("")]
public static extern IntPtr VirtualAllocEx(IntPtr hProcess, int lpAddress, int dwSize, MEM_COMMIT flAllocationType,
MEM_PAGE flProtect);
[DllImport("")]
public static extern IntPtr VirtualFreeEx(IntPtr hProcess, IntPtr lpAddress, int dwSize, MEM_COMMIT dwFreeType);
[DllImport("", CharSet = )]
public static extern int GetWindowText(IntPtr hWnd, out STRINGBUFFER text, int nMaxCount);
[DllImport("", CharSet = )]
public static extern int GetClassName(IntPtr hWnd, out STRINGBUFFER ClassName, int nMaxCount);
[DllImport("", CharSet = )]
public static extern int SendMessage(IntPtr hWnd, int Msg, int wParam, int lParam);
[DllImport("", CharSet = )]
public static extern int SendMessage(IntPtr hWnd, int Msg, int wParam, IntPtr lParam);
[DllImport("")]
public static extern int EnumChildWindows(IntPtr hWndParent, EnumWindowsProc ewp, int lParam);
}
}
发布评论