快捷導(dǎo)航

C#獲取進(jìn)程和對(duì)進(jìn)程的操作

更新時(shí)間：2013年04月23日 12:04:07 作者：

下面是一個(gè)例子：獲取進(jìn)程列表、創(chuàng)建“違禁”進(jìn)程名單、查找并殺死進(jìn)程。注意先要在項(xiàng)目里添加System.Management的引用。

最近看到一個(gè)考試系統(tǒng)，有個(gè)功能是用來(lái)監(jiān)視進(jìn)程的。一旦發(fā)現(xiàn)如Communicator.exe這樣的違禁軟件就立即殺死進(jìn)程并上報(bào)給服務(wù)器。我稍微研究了一下，這個(gè)功能實(shí)現(xiàn)起來(lái)其實(shí)很簡(jiǎn)單。就是使用ManagementObjectSearcher獲取進(jìn)程列表，然后放在一個(gè)Collection 里，之后就可以按照自己的邏輯去做了。

復(fù)制代碼代碼如下:

using System;
using System.Management;

namespace ConsoleApplication3
{

    class Program
    {
        static void Main(string[] args)
        {
            // Show Process List
            Console.WriteLine("===========Process List===========");
            ManagementObjectCollection objects = new ManagementObjectSearcher("SELECT * FROM Win32_Process").Get();
            foreach (ManagementObject item in objects)
            {
                Console.WriteLine((item["Name"].ToString()));
            }

            // Create Ban List
            Console.WriteLine("===========Ban List===========");
            string lst = "Communicator.exe,POWERPNT.exe,notepad.exe";
            string[] bannedProc = lst.Split(‘,‘);
            foreach (string s in bannedProc)
            {
                Console.WriteLine(s);
            }

            // Search and Destroy
            Console.WriteLine("===========Search and Destroy===========");
            Console.WriteLine("Searching for banned process...");
            int count = 0;
            foreach (string item in bannedProc)
            {
                if (DetectProcess(item))
                {
                    count++;
                    Console.WriteLine("Process [{0}] Detected!", item);
                    Console.WriteLine("[{0}] was killed {1}.", item, KillProcess(item) ? "Successfully" : "Unsucessfully");
                }
            }
            Console.WriteLine("Done, {0} banned process found", count);
        }

        protected static bool DetectProcess(string pProcessName)
        {
            ManagementObjectCollection objects = new ManagementObjectSearcher("SELECT * FROM Win32_Process").Get();
            foreach (ManagementObject item in objects)
            {
                string str = item["Name"].ToString();
                if (str.Trim().ToUpper() == pProcessName.Trim().ToUpper())
                {
                    return true;
                }
            }
            return false;
        }

        public static bool KillProcess(string pProcessName)
        {
            ManagementObjectCollection objects = new ManagementObjectSearcher("SELECT * FROM Win32_Process").Get();
            foreach (ManagementObject item in objects)
            {
                string str = item["Name"].ToString();
                if (str.Trim().ToUpper() == pProcessName.Trim().ToUpper())
                {
                    string[] args = new string[] { "0" };
                    item.InvokeMethod("Terminate", args);
                    return true;
                }
            }
            return false;
        }
    }
}