首页 > 系统服务 > 详细

枚举进程的几种方法

时间:2015-10-19 00:22:18      阅读:354      评论:0      收藏:0      [点我收藏+]

                               枚举进程

1、通过创建系统进程(TH32CS_SNAPPROCESS)快照函数进行枚举进程:

#include <Windows.h>
#include <TlHelp32.h>
#include <stdio.h>

int main()
{
	PROCESSENTRY32 processEntry = {0};
	HANDLE hProcessSnap = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS,0);	//创建进程(TH32CS_SNAPPROCESS)的快照,并返回句柄
	if (hProcessSnap == INVALID_HANDLE_VALUE)			//如果非法
		return -1;
	processEntry.dwSize = sizeof(PROCESSENTRY32);
	BOOL bRet = Process32First(hProcessSnap,&processEntry);
	while (bRet)
	{
		printf("%s,进程ID:%d\n",  processEntry.szExeFile,processEntry.th32ProcessID);
		bRet = Process32Next(hProcessSnap, &processEntry);
	}
	printf("hello World!\n");
	system("pause");
	return 0;
}

 2、枚举进程方法二:

/*记得要添加在工程->配置属性->链接器->输入->附加依赖项->增加psapi.lib*/
#include <Windows.h>
#include <stdio.h>
#include <Psapi.h>
#include <stdlib.h>

BOOL UpdateProcessPrivilege(HANDLE hProcess,LPCTSTR lpPrivilegeName = SE_DEBUG_NAME);//提供权限函数声明

int main()
{
	//提示权限
	UpdateProcessPrivilege(GetCurrentProcess());
	DWORD ProcessId[1024];
	DWORD cbNeeded;
	DWORD processcount;

	if (!EnumProcesses(ProcessId, sizeof(ProcessId), &cbNeeded))
	{
		printf("Failed\n");
		return -1;
	}
	processcount = cbNeeded / sizeof(DWORD);	//计算一共有几个进程
	printf("当前一共有%d个进程\n\n", processcount);

	for (DWORD i = 0; i < processcount;i++)
	{
		HANDLE hProcess = OpenProcess(PROCESS_QUERY_INFORMATION|PROCESS_VM_READ,FALSE,ProcessId[i]);//要打开进程,就要提高本身的权限
		if (hProcess)
		{
			printf("\nProcessID:%d打开成功\n",ProcessId[i]);
		}else
		{
			printf("\nProcessID:%d打开失败\n", ProcessId[i]);
			}
	}
	system("pause");
	return 0;
}

BOOL UpdateProcessPrivilege(HANDLE hProcess, LPCTSTR lpPrivilegeName)
{
	HANDLE hToken;
	int iResult;
	TOKEN_PRIVILEGES TokenPrivileges;

	if (OpenProcessToken(hProcess, TOKEN_ALL_ACCESS, &hToken))
	{
		LUID destLuid;
		if (LookupPrivilegeValue(NULL, lpPrivilegeName, &destLuid))
		{
			TokenPrivileges.PrivilegeCount = 1;
			TokenPrivileges.Privileges[0].Attributes = SE_PRIVILEGE_ENABLED;
			TokenPrivileges.Privileges[0].Luid = destLuid;

			if (iResult = AdjustTokenPrivileges(hToken, FALSE, &TokenPrivileges, 0, NULL, NULL)){
				return TRUE;
			}
		}
	}
	return FALSE;
}

 

 

  

枚举进程的几种方法

原文:http://www.cnblogs.com/GyaoG/p/4890630.html

(0)
(0)
   
举报
评论 一句话评论(0
关于我们 - 联系我们 - 留言反馈 - 联系我们:wmxa8@hotmail.com
© 2014 bubuko.com 版权所有
打开技术之扣,分享程序人生!