我要评论最近看到一个考试系统，有个功能是用来监视进程的。一旦发现如communicator.exe这样的违禁软件就立即杀死进程并上报给服务器。我稍 微研究了一下，这个功能实现起来其实很简单。就是使用managementobjectsearcher获取进程列表，然后放在一个collection 里，之后就可以按照自己的逻辑去做了。
using system;
using system.management;
namespace consoleapplication3
{
class program
{
static void main(string[] args)
{
// show process list
console.writeline("===========process list===========");
managementobjectcollection objects = new managementobjectsearcher("select * from win32_process").get();
foreach (managementobject item in objects)
{
console.writeline((item["name"].tostring()));
}
// create ban list
console.writeline("===========ban list===========");
string lst = "communicator.exe,powerpnt.exe,notepad.exe";
string[] bannedproc = lst.split(‘,‘);
foreach (string s in bannedproc)
{
console.writeline(s);
}
// search and destroy
console.writeline("===========search and destroy===========");
console.writeline("searching for banned process...");
int count = 0;
foreach (string item in bannedproc)
{
if (detectprocess(item))
{
count++;
console.writeline("process [{0}] detected!", item);
console.writeline("[{0}] was killed {1}.", item, killprocess(item) ? "successfully" : "unsucessfully");
}
}
console.writeline("done, {0} banned process found", count);
}
protected static bool detectprocess(string pprocessname)
{
managementobjectcollection objects = new managementobjectsearcher("select * from win32_process").get();
foreach (managementobject item in objects)
{
string str = item["name"].tostring();
if (str.trim().toupper() == pprocessname.trim().toupper())
{
return true;
}
}
return false;
}
public static bool killprocess(string pprocessname)
{
managementobjectcollection objects = new managementobjectsearcher("select * from win32_process").get();
foreach (managementobject item in objects)
{
string str = item["name"].tostring();
if (str.trim().toupper() == pprocessname.trim().toupper())
{
string[] args = new string[] { "0" };
item.invokemethod("terminate", args);
return true;
}
}
return false;
}
}
}
效果如下：
如您对本文有疑问或者有任何想说的，请点击进行留言回复，万千网友为您解惑！
网友评论