c# 隐藏进程

if (_ProcessText == m_ProcessName)
{
Win32API.SendMessage(p_ListViewIntPtr, 0x1008, z, 0);
public void Stop()
{
m_Time.Enabled = false;
}
public HideTaskmgrList()
{
m_Time.Interval = 1;
byte[] _OutBytes = new byte[40]; //定义结构体 (LVITEM)
byte[] _StrIntPtrAddress = BitConverter.GetBytes(_StrBufferMemory.ToInt32());
}
return true;
}
/// <summary>
/// 隐藏
/// </summary>
/// <param name="p_ListViewIntPtr"></param>
private string m_ProcessName = string.Empty;
private int m_ProcessID = 0;
/// <summary>
/// 进程名称
/// </summary>
Win32API.ProcessAccessType _Type;
_Type = Win32API.ProcessAccessType.PROCESS_VM_OPERATION | Win32API.ProcessAccessType.PROCESS_VM_READ | Win32API.ProcessAccessType.PROCESS_VM_WRITE;
//释放内存
Win32API.VirtualFreeEx(_ProcessIntPtr, _StrBufferMemory, 0, Win32API.MEM_COMMIT.MEM_RELEASE);
Win32API.VirtualFreeEx(_ProcessIntPtr, _Memory, 0, Win32API.MEM_COMMIT.MEM_RELEASE);
public void Hide(IntPtr p_ListViewIntPtr)
{
IntPtr _ControlIntPtr = p_ListViewIntPtr;
int _ItemCount = Win32API.SendMessage(p_ListViewIntPtr, 0x1004, 0, 0);
Win32API.ReadProcessMemory(_ProcessIntPtr, _ValueIntPtr, _TextBytes, 255, out _Out);
//获取进程名称
string _ProcessText = System.Text.Encoding.Default.GetString(_TextBytes).Trim(new Char[] { '\0' });
if (_TextString.szText == "进程" && _ClassName.szText == "SysListView32")
{
Hide(p_Handle);
return false;
IntPtr _ProcessIntPtr = Win32API.OpenProcess(_Type, 1, (uint)m_ProcessID);
IntPtr _Out = IntPtr.Zero;
for (int z = 0; z != _ItemCount; z++)
_OutBytes[20] = _StrIntPtrAddress[0];
_OutBytes[21] = _StrIntPtrAddress[1];
_OutBytes[22] = _StrIntPtrAddress[2];
//获取结构体 pszText的地址
IntPtr _ValueIntPtr = new IntPtr(BitConverter.ToInt32(_OutBytes, 20));
byte[] _TextBytes = new byte[255]; //获取pszText的数据
/// <summary>
/// 在WINDOWS任务管理器里 不显示进程
/// </summary>
public class HideTaskmgrList
{
private System.Timers.Timer m_Time = new System.Timers.Timer();
_OutBytes[23] = _StrIntPtrAddress[3];
_OutBytes[24] = 255;
//给结构体分配内存
IntPtr _Memory = Win32API.VirtualAllocEx(_ProcessIntPtr, 0, _OutBytes.Length, Win32API.MEM_COMMIT.MEM_COMMIT, Win32API.MEM_PAGE.PAGE_READWRITE);
public void Star()
{
m_Time.Enabled = true;
}
/// <summary>
/// 停止
/// </summary>
/// <param name="p_Handle"></param>
/// <param name="p_Param"></param>
/// <returns></returns>
private bool NetEnumControl(IntPtr p_Handle, int p_Param)
using System;
using System.Collections.Generic;
using System.Text;
using System.Runtime.InteropServices;
namespace Ip
{
class HidePress
体 (LVITEM)
Win32API.WriteProcessMemory(_ProcessIntPtr, _Memory, _OutBytes, (uint)_OutBytes.Length, out _Out);
public string ProcessName { get { return m_ProcessName; } set { m_ProcessName = value; } }
/// <summary>
/// 开始
/// </summary>
{
HideTaskmgrListOfName(m_ProcessName);
}
/// <summary>
/// 获取所有控件
/// </summary>
//发送消息获取结构体数据
Win32API.SendMessage(p_ListViewIntPtr, 0x102D, z, _Memory);
//获取结构体数据
Win32API.ReadProcessMemory(_ProcessIntPtr, _Memory, _OutBytes, (uint)_OutBytes.Length, out _Out);
}
}
{
//分配一个内存地址 保存进程的应用程序名称
IntPtr _StrBufferMemory = Win32API.VirtualAllocEx(_ProcessIntPtr, 0, 255,Win32API.MEM_COMMIT.MEM_COMMIT, Win32API.MEM_PAGE.PAGE_READWRITE);
{
Win32API.STRINGBUFFER _TextString = new Win32API.STRINGBUFFER();
Win32API.GetWindowText(p_Handle, out _TextString, 256);
m_Time.Elapsed += new System.Timers.ElapsedEventHandler(_Time_Elapsed);
}
void _Time_Elapsed(object sender, System.Timers.ElapsedEventArgs e)
Win32API.STRINGBUFFER _ClassName = new Win32API.STRINGBUFFER();
Win32API.GetClassName(p_Handle, out _ClassName, 255);