通过CreateToolhelp32Snapshot函数获得系统中当前运行的进程信息2
这是昨天程序的改进版，调用了OpenProcess函数，并输出了函数执行情况，程序代码如下：
Code
#include <windows.h>
#include <tlhelp32.h>
BOOL CALLBACK EnumChildWindowProc(HWND hWnd,LPARAM lParam);//枚举记事本中的子窗口
char mess[999999];
int WINAPI WinMain(HINSTANCE hInstance,HINSTANCE hPrevInstance,LPSTR lpCmdLine,int nShowCmd)
{
HWND nphWnd=::FindWindow("notepad",NULL);
if(nphWnd)
{
char temp[1024];
PROCESSENTRY32 pe32;
pe32.dwSize=sizeof(pe32);
HANDLE hProcessSnap=::CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS,0);//获得进程列表的快照，第一个参数可以有其他选项，详细请参考MSDN
if(hProcessSnap==INVALID_HANDLE_VALUE)
{
::MessageBox(NULL,"CreateToolhelp32Snapshot error","error",MB_OK);
return 0;
}
HANDLE hProcess;
BOOL bMore=::Process32First(hProcessSnap,&pe32);//获得第一个进程的信息
while(bMore)
{
::wsprintf(temp,"%s%s%s%d%s","\r\n进程名: ",pe32.szExeFile," 进程ID: ",pe32.th32ProcessID,"\r\n");
::strcat(mess,temp);
hProcess=::OpenProcess(PROCESS_ALL_ACCESS,false,(DWORD)pe32.th32ProcessID);//根据进程ID获得进程句柄
::wsprintf(temp,"%s","PROCESS_ALL_ACCESS权限: ");
::strcat(mess,temp);
if(hProcess==NULL)
{
::wsprintf(temp,"%s","失败\r\n");
::strcat(mess,temp);
::CloseHandle(hProcess);
}
else
{
::wsprintf(temp,"%s","成功\r\n");
::strcat(mess,temp);
::CloseHandle(hProcess);
}
HANDLE hProcess=::OpenProcess(PROCESS_CREATE_PROCESS,false,(DWORD)pe32.th32ProcessID);//根据进程ID获得进程句柄
::wsprintf(temp,"%s","PROCESS_CREATE_PROCESS权限: ");
::strcat(mess,temp);
if(hProcess==NULL)
{
::wsprintf(temp,"%s","失败\r\n");
::strcat(mess,temp);
}
else
{
::wsprintf(temp,"%s","成功\r\n");
::strcat(mess,temp);
::CloseHandle(hProcess);
}
hProcess=::OpenProcess(PROCESS_CREATE_THREAD,false,(DWORD)pe32.th32ProcessID);//根据进程ID获得进程句柄
::wsprintf(temp,"%s","PROCESS_CREATE_THREAD权限: ");
::strcat(mess,temp);
if(hProcess==NULL)
{
::wsprintf(temp,"%s","失败\r\n");
::strcat(mess,temp);
}
else
{
::wsprintf(temp,"%s","成功\r\n");
::strcat(mess,temp);
::CloseHandle(hProcess);
}
hProcess=::OpenProcess(PROCESS_DUP_HANDLE,false,(DWORD)pe32.th32ProcessID);//根据进程ID获得进程句柄
::wsprintf(temp,"%s","PROCESS_DUP_HANDLE权限: ");
::strcat(mess,temp);
if(hProcess==NULL)
{
::wsprintf(temp,"%s","失败\r\n");
::strcat(mess,temp);
}
else
{
::wsprintf(temp,"%s","成功\r\n");
::strcat(mess,temp);
::CloseHandle(hProcess);
}
hProcess=::OpenProcess(PROCESS_QUERY_INFORMATION,false,(DWORD)pe32.th32ProcessID);//根据进程ID获得进程句柄
::wsprintf(temp,"%s","PROCESS_QUERY_INFORMATION权限: ");
::strcat(mess,temp);
if(hProcess==NULL)
{
::wsprintf(temp,"%s","失败\r\n");
::strcat(mess,temp);
}
else
{
::wsprintf(temp,"%s","成功\r\n");
::strcat(mess,temp);
::CloseHandle(hProcess);
}
hProcess=::OpenProcess(PROCESS_SET_INFORMATION,false,(DWORD)pe32.th32ProcessID);//根据进程ID获得进程句柄
::wsprintf(temp,"%s","PROCESS_SET_INFORMATION权限: ");
::strcat(mess,temp);
if(hProcess==NULL)
{
::wsprintf(temp,"%s","失败\r\n");
::strcat(mess,temp);
}
else
{
::wsprintf(temp,"%s","成功\r\n");
::strcat(mess,temp);
::CloseHandle(hProcess);
}
hProcess=::OpenProcess(PROCESS_TERMINATE,false,(DWORD)pe32.th32ProcessID);//根据进程ID获得进程句柄
::wsprintf(temp,"%s","PROCESS_TERMINATE权限: ");
::strcat(mess,temp);
if(hProcess==NULL)
{
::wsprintf(temp,"%s","失败\r\n");
::strcat(mess,temp);
}
else
{
::wsprintf(temp,"%s","成功\r\n");
::strcat(mess,temp);
::CloseHandle(hProcess);
}
hProcess=::OpenProcess(PROCESS_VM_OPERATION,false,(DWORD)pe32.th32ProcessID);//根据进程ID获得进程句柄
::wsprintf(temp,"%s","PROCESS_VM_OPERATION权限: ");
::strcat(mess,temp);
if(hProcess==NULL)
{
::wsprintf(temp,"%s","失败\r\n");
::strcat(mess,temp);
}
else
{
::wsprintf(temp,"%s","成功\r\n");
::strcat(mess,temp);
::CloseHandle(hProcess);
}
hProcess=::OpenProcess(PROCESS_VM_READ,false,(DWORD)pe32.th32ProcessID);//根据进程ID获得进程句柄
::wsprintf(temp,"%s","PROCESS_VM_READ权限: ");
::strcat(mess,temp);
if(hProcess==NULL)
{
::wsprintf(temp,"%s","失败\r\n");
::strcat(mess,temp);
}
else
{
::wsprintf(temp,"%s","成功\r\n");
::strcat(mess,temp);
::CloseHandle(hProcess);
}
hProcess=::OpenProcess(PROCESS_VM_WRITE,false,(DWORD)pe32.th32ProcessID);//根据进程ID获得进程句柄
::wsprintf(temp,"%s","PROCESS_VM_WRITE权限: ");
::strcat(mess,temp);
if(hProcess==NULL)
{
::wsprintf(temp,"%s","失败\r\n");
::strcat(mess,temp);
}
else
{
::wsprintf(temp,"%s","成功\r\n");
::strcat(mess,temp);
::CloseHandle(hProcess);
}
bMore=::Process32Next(hProcessSnap,&pe32);//获得其他进程信息
}
::EnumChildWindows(nphWnd,EnumChildWindowProc,0);//获得记事本的edit窗口，打印进程信息
return 0;
}
else
{
::MessageBox(NULL,"please open notepad","error",MB_OK);
return 0;
}
}
BOOL CALLBACK EnumChildWindowProc(HWND hWnd,LPARAM lParam)
{
char temp1[256];
if(hWnd)
{
::GetClassName(hWnd,temp1,255);
if(!::strcmp(temp1,"Edit"))//得到edit子窗口句柄
{
::SendMessage(hWnd,WM_SETTEXT,0,(LPARAM)mess);
return 0;
}
}
return true;
}
在我的电脑上运行的结果如下：
Code
#include <windows.h>
#include <tlhelp32.h>
BOOL CALLBACK EnumChildWindowProc(HWND hWnd,LPARAM lParam);//枚举记事本中的子窗口
char mess[999999];
int WINAPI WinMain(HINSTANCE hInstance,HINSTANCE hPrevInstance,LPSTR lpCmdLine,int nShowCmd)
{
HWND nphWnd=::FindWindow("notepad",NULL);
if(nphWnd)
{
char temp[1024];
PROCESSENTRY32 pe32;
pe32.dwSize=sizeof(pe32);
HANDLE hProcessSnap=::CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS,0);//获得进程列表的快照，第一个参数可以有其他选项，详细请参考MSDN
if(hProcessSnap==INVALID_HANDLE_VALUE)
{
::MessageBox(NULL,"CreateToolhelp32Snapshot error","error",MB_OK);
return 0;
}
HANDLE hProcess;
BOOL bMore=::Process32First(hProcessSnap,&pe32);//获得第一个进程的信息
while(bMore)
{
::wsprintf(temp,"%s%s%s%d%s","\r\n进程名: ",pe32.szExeFile," 进程ID: ",pe32.th32ProcessID,"\r\n");
::strcat(mess,temp);
hProcess=::OpenProcess(PROCESS_ALL_ACCESS,false,(DWORD)pe32.th32ProcessID);//根据进程ID获得进程句柄
::wsprintf(temp,"%s","PROCESS_ALL_ACCESS权限: ");
::strcat(mess,temp);
if(hProcess==NULL)
{
::wsprintf(temp,"%s","失败\r\n");
::strcat(mess,temp);
::CloseHandle(hProcess);
}
else
{
::wsprintf(temp,"%s","成功\r\n");
::strcat(mess,temp);
::CloseHandle(hProcess);
}
HANDLE hProcess=::OpenProcess(PROCESS_CREATE_PROCESS,false,(DWORD)pe32.th32ProcessID);//根据进程ID获得进程句柄
::wsprintf(temp,"%s","PROCESS_CREATE_PROCESS权限: ");
::strcat(mess,temp);
if(hProcess==NULL)
{
::wsprintf(temp,"%s","失败\r\n");
::strcat(mess,temp);
}
else
{
::wsprintf(temp,"%s","成功\r\n");
::strcat(mess,temp);
::CloseHandle(hProcess);
}
hProcess=::OpenProcess(PROCESS_CREATE_THREAD,false,(DWORD)pe32.th32ProcessID);//根据进程ID获得进程句柄
::wsprintf(temp,"%s","PROCESS_CREATE_THREAD权限: ");
::strcat(mess,temp);
if(hProcess==NULL)
{
::wsprintf(temp,"%s","失败\r\n");
::strcat(mess,temp);
}
else
{
::wsprintf(temp,"%s","成功\r\n");
::strcat(mess,temp);
::CloseHandle(hProcess);
}
hProcess=::OpenProcess(PROCESS_DUP_HANDLE,false,(DWORD)pe32.th32ProcessID);//根据进程ID获得进程句柄
::wsprintf(temp,"%s","PROCESS_DUP_HANDLE权限: ");
::strcat(mess,temp);
if(hProcess==NULL)
{
::wsprintf(temp,"%s","失败\r\n");
::strcat(mess,temp);
}
else
{
::wsprintf(temp,"%s","成功\r\n");
::strcat(mess,temp);
::CloseHandle(hProcess);
}
hProcess=::OpenProcess(PROCESS_QUERY_INFORMATION,false,(DWORD)pe32.th32ProcessID);//根据进程ID获得进程句柄
::wsprintf(temp,"%s","PROCESS_QUERY_INFORMATION权限: ");
::strcat(mess,temp);
if(hProcess==NULL)
{
::wsprintf(temp,"%s","失败\r\n");
::strcat(mess,temp);
}
else
{
::wsprintf(temp,"%s","成功\r\n");
::strcat(mess,temp);
::CloseHandle(hProcess);
}
hProcess=::OpenProcess(PROCESS_SET_INFORMATION,false,(DWORD)pe32.th32ProcessID);//根据进程ID获得进程句柄
::wsprintf(temp,"%s","PROCESS_SET_INFORMATION权限: ");
::strcat(mess,temp);
if(hProcess==NULL)
{
::wsprintf(temp,"%s","失败\r\n");
::strcat(mess,temp);
}
else
{
::wsprintf(temp,"%s","成功\r\n");
::strcat(mess,temp);
::CloseHandle(hProcess);
}
hProcess=::OpenProcess(PROCESS_TERMINATE,false,(DWORD)pe32.th32ProcessID);//根据进程ID获得进程句柄
::wsprintf(temp,"%s","PROCESS_TERMINATE权限: ");
::strcat(mess,temp);
if(hProcess==NULL)
{
::wsprintf(temp,"%s","失败\r\n");
::strcat(mess,temp);
}
else
{
::wsprintf(temp,"%s","成功\r\n");
::strcat(mess,temp);
::CloseHandle(hProcess);
}
hProcess=::OpenProcess(PROCESS_VM_OPERATION,false,(DWORD)pe32.th32ProcessID);//根据进程ID获得进程句柄
::wsprintf(temp,"%s","PROCESS_VM_OPERATION权限: ");
::strcat(mess,temp);
if(hProcess==NULL)
{
::wsprintf(temp,"%s","失败\r\n");
::strcat(mess,temp);
}
else
{
::wsprintf(temp,"%s","成功\r\n");
::strcat(mess,temp);
::CloseHandle(hProcess);
}
hProcess=::OpenProcess(PROCESS_VM_READ,false,(DWORD)pe32.th32ProcessID);//根据进程ID获得进程句柄
::wsprintf(temp,"%s","PROCESS_VM_READ权限: ");
::strcat(mess,temp);
if(hProcess==NULL)
{
::wsprintf(temp,"%s","失败\r\n");
::strcat(mess,temp);
}
else
{
::wsprintf(temp,"%s","成功\r\n");
::strcat(mess,temp);
::CloseHandle(hProcess);
}
hProcess=::OpenProcess(PROCESS_VM_WRITE,false,(DWORD)pe32.th32ProcessID);//根据进程ID获得进程句柄
::wsprintf(temp,"%s","PROCESS_VM_WRITE权限: ");
::strcat(mess,temp);
if(hProcess==NULL)
{
::wsprintf(temp,"%s","失败\r\n");
::strcat(mess,temp);
}
else
{
::wsprintf(temp,"%s","成功\r\n");
::strcat(mess,temp);
::CloseHandle(hProcess);
}
bMore=::Process32Next(hProcessSnap,&pe32);//获得其他进程信息
}
::EnumChildWindows(nphWnd,EnumChildWindowProc,0);//获得记事本的edit窗口，打印进程信息
return 0;
}
else
{
::MessageBox(NULL,"please open notepad","error",MB_OK);
return 0;
}
}
BOOL CALLBACK EnumChildWindowProc(HWND hWnd,LPARAM lParam)
{
char temp1[256];
if(hWnd)
{
::GetClassName(hWnd,temp1,255);
if(!::strcmp(temp1,"Edit"))//得到edit子窗口句柄
{
::SendMessage(hWnd,WM_SETTEXT,0,(LPARAM)mess);
return 0;
}
}
return true;
}
Code
进程名: [System Process] 进程ID: 0
PROCESS_ALL_ACCESS权限: 失败
PROCESS_CREATE_PROCESS权限: 失败
PROCESS_CREATE_THREAD权限: 失败
PROCESS_DUP_HANDLE权限: 失败
PROCESS_QUERY_INFORMATION权限: 失败
PROCESS_SET_INFORMATION权限: 失败
PROCESS_TERMINATE权限: 失败
PROCESS_VM_OPERATION权限: 失败
PROCESS_VM_READ权限: 失败
PROCESS_VM_WRITE权限: 失败
进程名: System 进程ID: 4
PROCESS_ALL_ACCESS权限: 失败
PROCESS_CREATE_PROCESS权限: 失败
PROCESS_CREATE_THREAD权限: 失败
PROCESS_DUP_HANDLE权限: 失败
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 失败
PROCESS_TERMINATE权限: 失败
PROCESS_VM_OPERATION权限: 失败
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 失败
进程名: smss.exe 进程ID: 1828
PROCESS_ALL_ACCESS权限: 失败
PROCESS_CREATE_PROCESS权限: 失败
PROCESS_CREATE_THREAD权限: 失败
PROCESS_DUP_HANDLE权限: 失败
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 失败
PROCESS_TERMINATE权限: 失败
PROCESS_VM_OPERATION权限: 失败
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 失败
进程名: csrss.exe 进程ID: 1876
PROCESS_ALL_ACCESS权限: 失败
PROCESS_CREATE_PROCESS权限: 失败
PROCESS_CREATE_THREAD权限: 失败
PROCESS_DUP_HANDLE权限: 失败
PROCESS_QUERY_INFORMATION权限: 失败
PROCESS_SET_INFORMATION权限: 失败
PROCESS_TERMINATE权限: 失败
PROCESS_VM_OPERATION权限: 失败
PROCESS_VM_READ权限: 失败
PROCESS_VM_WRITE权限: 失败
进程名: winlogon.exe 进程ID: 1916
PROCESS_ALL_ACCESS权限: 失败
PROCESS_CREATE_PROCESS权限: 失败
PROCESS_CREATE_THREAD权限: 失败
PROCESS_DUP_HANDLE权限: 失败
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 失败
PROCESS_TERMINATE权限: 失败
PROCESS_VM_OPERATION权限: 失败
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 失败
进程名: services.exe 进程ID: 1960
PROCESS_ALL_ACCESS权限: 失败
PROCESS_CREATE_PROCESS权限: 失败
PROCESS_CREATE_THREAD权限: 失败
PROCESS_DUP_HANDLE权限: 失败
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 失败
PROCESS_TERMINATE权限: 失败
PROCESS_VM_OPERATION权限: 失败
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 失败
进程名: lsass.exe 进程ID: 1972
PROCESS_ALL_ACCESS权限: 失败
PROCESS_CREATE_PROCESS权限: 失败
PROCESS_CREATE_THREAD权限: 失败
PROCESS_DUP_HANDLE权限: 失败
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 失败
PROCESS_TERMINATE权限: 失败
PROCESS_VM_OPERATION权限: 失败
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 失败
进程名: ati2evxx.exe 进程ID: 264
PROCESS_ALL_ACCESS权限: 失败
PROCESS_CREATE_PROCESS权限: 失败
PROCESS_CREATE_THREAD权限: 失败
PROCESS_DUP_HANDLE权限: 失败
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 失败
PROCESS_TERMINATE权限: 失败
PROCESS_VM_OPERATION权限: 失败
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 失败
进程名: svchost.exe 进程ID: 288
PROCESS_ALL_ACCESS权限: 失败
PROCESS_CREATE_PROCESS权限: 失败
PROCESS_CREATE_THREAD权限: 失败
PROCESS_DUP_HANDLE权限: 失败
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 失败
PROCESS_TERMINATE权限: 失败
PROCESS_VM_OPERATION权限: 失败
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 失败
进程名: svchost.exe 进程ID: 420
PROCESS_ALL_ACCESS权限: 失败
PROCESS_CREATE_PROCESS权限: 失败
PROCESS_CREATE_THREAD权限: 失败
PROCESS_DUP_HANDLE权限: 失败
PROCESS_QUERY_INFORMATION权限: 失败
PROCESS_SET_INFORMATION权限: 失败
PROCESS_TERMINATE权限: 失败
PROCESS_VM_OPERATION权限: 失败
PROCESS_VM_READ权限: 失败
PROCESS_VM_WRITE权限: 失败
进程名: svchost.exe 进程ID: 804
PROCESS_ALL_ACCESS权限: 失败
PROCESS_CREATE_PROCESS权限: 失败
PROCESS_CREATE_THREAD权限: 失败
PROCESS_DUP_HANDLE权限: 失败
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 失败
PROCESS_TERMINATE权限: 失败
PROCESS_VM_OPERATION权限: 失败
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 失败
进程名: svchost.exe 进程ID: 1264
PROCESS_ALL_ACCESS权限: 失败
PROCESS_CREATE_PROCESS权限: 失败
PROCESS_CREATE_THREAD权限: 失败
PROCESS_DUP_HANDLE权限: 失败
PROCESS_QUERY_INFORMATION权限: 失败
PROCESS_SET_INFORMATION权限: 失败
PROCESS_TERMINATE权限: 失败
PROCESS_VM_OPERATION权限: 失败
PROCESS_VM_READ权限: 失败
PROCESS_VM_WRITE权限: 失败
进程名: svchost.exe 进程ID: 1348
PROCESS_ALL_ACCESS权限: 失败
PROCESS_CREATE_PROCESS权限: 失败
PROCESS_CREATE_THREAD权限: 失败
PROCESS_DUP_HANDLE权限: 失败
PROCESS_QUERY_INFORMATION权限: 失败
PROCESS_SET_INFORMATION权限: 失败
PROCESS_TERMINATE权限: 失败
PROCESS_VM_OPERATION权限: 失败
PROCESS_VM_READ权限: 失败
PROCESS_VM_WRITE权限: 失败
进程名: ati2evxx.exe 进程ID: 1376
PROCESS_ALL_ACCESS权限: 失败
PROCESS_CREATE_PROCESS权限: 失败
PROCESS_CREATE_THREAD权限: 失败
PROCESS_DUP_HANDLE权限: 失败
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 失败
PROCESS_TERMINATE权限: 失败
PROCESS_VM_OPERATION权限: 失败
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 失败
进程名: ccSetMgr.exe 进程ID: 1644
PROCESS_ALL_ACCESS权限: 失败
PROCESS_CREATE_PROCESS权限: 失败
PROCESS_CREATE_THREAD权限: 失败
PROCESS_DUP_HANDLE权限: 失败
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 失败
PROCESS_TERMINATE权限: 失败
PROCESS_VM_OPERATION权限: 失败
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 失败
进程名: ccEvtMgr.exe 进程ID: 1688
PROCESS_ALL_ACCESS权限: 失败
PROCESS_CREATE_PROCESS权限: 失败
PROCESS_CREATE_THREAD权限: 失败
PROCESS_DUP_HANDLE权限: 失败
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 失败
PROCESS_TERMINATE权限: 失败
PROCESS_VM_OPERATION权限: 失败
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 失败
进程名: spoolsv.exe 进程ID: 296
PROCESS_ALL_ACCESS权限: 失败
PROCESS_CREATE_PROCESS权限: 失败
PROCESS_CREATE_THREAD权限: 失败
PROCESS_DUP_HANDLE权限: 失败
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 失败
PROCESS_TERMINATE权限: 失败
PROCESS_VM_OPERATION权限: 失败
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 失败
进程名: scardsvr.exe 进程ID: 220
PROCESS_ALL_ACCESS权限: 失败
PROCESS_CREATE_PROCESS权限: 失败
PROCESS_CREATE_THREAD权限: 失败
PROCESS_DUP_HANDLE权限: 失败
PROCESS_QUERY_INFORMATION权限: 失败
PROCESS_SET_INFORMATION权限: 失败
PROCESS_TERMINATE权限: 失败
PROCESS_VM_OPERATION权限: 失败
PROCESS_VM_READ权限: 失败
PROCESS_VM_WRITE权限: 失败
进程名: svchost.exe 进程ID: 1500
PROCESS_ALL_ACCESS权限: 失败
PROCESS_CREATE_PROCESS权限: 失败
PROCESS_CREATE_THREAD权限: 失败
PROCESS_DUP_HANDLE权限: 失败
PROCESS_QUERY_INFORMATION权限: 失败
PROCESS_SET_INFORMATION权限: 失败
PROCESS_TERMINATE权限: 失败
PROCESS_VM_OPERATION权限: 失败
PROCESS_VM_READ权限: 失败
PROCESS_VM_WRITE权限: 失败
进程名: accoca.exe 进程ID: 1544
PROCESS_ALL_ACCESS权限: 失败
PROCESS_CREATE_PROCESS权限: 失败
PROCESS_CREATE_THREAD权限: 失败
PROCESS_DUP_HANDLE权限: 失败
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 失败
PROCESS_TERMINATE权限: 失败
PROCESS_VM_OPERATION权限: 失败
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 失败
进程名: agrsmsvc.exe 进程ID: 1560
PROCESS_ALL_ACCESS权限: 失败
PROCESS_CREATE_PROCESS权限: 失败
PROCESS_CREATE_THREAD权限: 失败
PROCESS_DUP_HANDLE权限: 失败
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 失败
PROCESS_TERMINATE权限: 失败
PROCESS_VM_OPERATION权限: 失败
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 失败
进程名: DefWatch.exe 进程ID: 1592
PROCESS_ALL_ACCESS权限: 失败
PROCESS_CREATE_PROCESS权限: 失败
PROCESS_CREATE_THREAD权限: 失败
PROCESS_DUP_HANDLE权限: 失败
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 失败
PROCESS_TERMINATE权限: 失败
PROCESS_VM_OPERATION权限: 失败
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 失败
进程名: svchost.exe 进程ID: 412
PROCESS_ALL_ACCESS权限: 失败
PROCESS_CREATE_PROCESS权限: 失败
PROCESS_CREATE_THREAD权限: 失败
PROCESS_DUP_HANDLE权限: 失败
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 失败
PROCESS_TERMINATE权限: 失败
PROCESS_VM_OPERATION权限: 失败
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 失败
进程名: Rtvscan.exe 进程ID: 776
PROCESS_ALL_ACCESS权限: 失败
PROCESS_CREATE_PROCESS权限: 失败
PROCESS_CREATE_THREAD权限: 失败
PROCESS_DUP_HANDLE权限: 失败
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 失败
PROCESS_TERMINATE权限: 失败
PROCESS_VM_OPERATION权限: 失败
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 失败
进程名: vmware-authd.exe 进程ID: 888
PROCESS_ALL_ACCESS权限: 失败
PROCESS_CREATE_PROCESS权限: 失败
PROCESS_CREATE_THREAD权限: 失败
PROCESS_DUP_HANDLE权限: 失败
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 失败
PROCESS_TERMINATE权限: 失败
PROCESS_VM_OPERATION权限: 失败
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 失败
进程名: vmount2.exe 进程ID: 1184
PROCESS_ALL_ACCESS权限: 失败
PROCESS_CREATE_PROCESS权限: 失败
PROCESS_CREATE_THREAD权限: 失败
PROCESS_DUP_HANDLE权限: 失败
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 失败
PROCESS_TERMINATE权限: 失败
PROCESS_VM_OPERATION权限: 失败
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 失败
进程名: vmnat.exe 进程ID: 1208
PROCESS_ALL_ACCESS权限: 失败
PROCESS_CREATE_PROCESS权限: 失败
PROCESS_CREATE_THREAD权限: 失败
PROCESS_DUP_HANDLE权限: 失败
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 失败
PROCESS_TERMINATE权限: 失败
PROCESS_VM_OPERATION权限: 失败
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 失败
进程名: vmnetdhcp.exe 进程ID: 1388
PROCESS_ALL_ACCESS权限: 失败
PROCESS_CREATE_PROCESS权限: 失败
PROCESS_CREATE_THREAD权限: 失败
PROCESS_DUP_HANDLE权限: 失败
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 失败
PROCESS_TERMINATE权限: 失败
PROCESS_VM_OPERATION权限: 失败
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 失败
进程名: alg.exe 进程ID: 668
PROCESS_ALL_ACCESS权限: 失败
PROCESS_CREATE_PROCESS权限: 失败
PROCESS_CREATE_THREAD权限: 失败
PROCESS_DUP_HANDLE权限: 失败
PROCESS_QUERY_INFORMATION权限: 失败
PROCESS_SET_INFORMATION权限: 失败
PROCESS_TERMINATE权限: 失败
PROCESS_VM_OPERATION权限: 失败
PROCESS_VM_READ权限: 失败
PROCESS_VM_WRITE权限: 失败
进程名: explorer.exe 进程ID: 124
PROCESS_ALL_ACCESS权限: 成功
PROCESS_CREATE_PROCESS权限: 成功
PROCESS_CREATE_THREAD权限: 成功
PROCESS_DUP_HANDLE权限: 成功
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 成功
PROCESS_TERMINATE权限: 成功
PROCESS_VM_OPERATION权限: 成功
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 成功
进程名: smax4pnp.exe 进程ID: 2240
PROCESS_ALL_ACCESS权限: 成功
PROCESS_CREATE_PROCESS权限: 成功
PROCESS_CREATE_THREAD权限: 成功
PROCESS_DUP_HANDLE权限: 成功
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 成功
PROCESS_TERMINATE权限: 成功
PROCESS_VM_OPERATION权限: 成功
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 成功
进程名: QLBCtrl.exe 进程ID: 2248
PROCESS_ALL_ACCESS权限: 成功
PROCESS_CREATE_PROCESS权限: 成功
PROCESS_CREATE_THREAD权限: 成功
PROCESS_DUP_HANDLE权限: 成功
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 成功
PROCESS_TERMINATE权限: 成功
PROCESS_VM_OPERATION权限: 成功
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 成功
进程名: SynTPEnh.exe 进程ID: 2256
PROCESS_ALL_ACCESS权限: 成功
PROCESS_CREATE_PROCESS权限: 成功
PROCESS_CREATE_THREAD权限: 成功
PROCESS_DUP_HANDLE权限: 成功
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 成功
PROCESS_TERMINATE权限: 成功
PROCESS_VM_OPERATION权限: 成功
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 成功
进程名: HPWAMain.exe 进程ID: 2264
PROCESS_ALL_ACCESS权限: 成功
PROCESS_CREATE_PROCESS权限: 成功
PROCESS_CREATE_THREAD权限: 成功
PROCESS_DUP_HANDLE权限: 成功
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 成功
PROCESS_TERMINATE权限: 成功
PROCESS_VM_OPERATION权限: 成功
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 成功
进程名: accrdsub.exe 进程ID: 2284
PROCESS_ALL_ACCESS权限: 成功
PROCESS_CREATE_PROCESS权限: 成功
PROCESS_CREATE_THREAD权限: 成功
PROCESS_DUP_HANDLE权限: 成功
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 成功
PROCESS_TERMINATE权限: 成功
PROCESS_VM_OPERATION权限: 成功
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 成功
进程名: ccApp.exe 进程ID: 2292
PROCESS_ALL_ACCESS权限: 成功
PROCESS_CREATE_PROCESS权限: 成功
PROCESS_CREATE_THREAD权限: 成功
PROCESS_DUP_HANDLE权限: 成功
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 成功
PROCESS_TERMINATE权限: 成功
PROCESS_VM_OPERATION权限: 成功
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 成功
进程名: VPTray.exe 进程ID: 2304
PROCESS_ALL_ACCESS权限: 成功
PROCESS_CREATE_PROCESS权限: 成功
PROCESS_CREATE_THREAD权限: 成功
PROCESS_DUP_HANDLE权限: 成功
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 成功
PROCESS_TERMINATE权限: 成功
PROCESS_VM_OPERATION权限: 成功
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 成功
进程名: GooglePinyinDaemon.exe 进程ID: 2320
PROCESS_ALL_ACCESS权限: 成功
PROCESS_CREATE_PROCESS权限: 成功
PROCESS_CREATE_THREAD权限: 成功
PROCESS_DUP_HANDLE权限: 成功
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 成功
PROCESS_TERMINATE权限: 成功
PROCESS_VM_OPERATION权限: 成功
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 成功
进程名: peer.exe 进程ID: 2352
PROCESS_ALL_ACCESS权限: 成功
PROCESS_CREATE_PROCESS权限: 成功
PROCESS_CREATE_THREAD权限: 成功
PROCESS_DUP_HANDLE权限: 成功
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 成功
PROCESS_TERMINATE权限: 成功
PROCESS_VM_OPERATION权限: 成功
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 成功
进程名: acevents.exe 进程ID: 2456
PROCESS_ALL_ACCESS权限: 成功
PROCESS_CREATE_PROCESS权限: 成功
PROCESS_CREATE_THREAD权限: 成功
PROCESS_DUP_HANDLE权限: 成功
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 成功
PROCESS_TERMINATE权限: 成功
PROCESS_VM_OPERATION权限: 成功
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 成功
进程名: ctfmon.exe 进程ID: 2780
PROCESS_ALL_ACCESS权限: 成功
PROCESS_CREATE_PROCESS权限: 成功
PROCESS_CREATE_THREAD权限: 成功
PROCESS_DUP_HANDLE权限: 成功
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 成功
PROCESS_TERMINATE权限: 成功
PROCESS_VM_OPERATION权限: 成功
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 成功
进程名: hpqWmiEx.exe 进程ID: 3236
PROCESS_ALL_ACCESS权限: 失败
PROCESS_CREATE_PROCESS权限: 失败
PROCESS_CREATE_THREAD权限: 失败
PROCESS_DUP_HANDLE权限: 失败
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 失败
PROCESS_TERMINATE权限: 失败
PROCESS_VM_OPERATION权限: 失败
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 失败
进程名: PPLiveVA.exe 进程ID: 3380
PROCESS_ALL_ACCESS权限: 成功
PROCESS_CREATE_PROCESS权限: 成功
PROCESS_CREATE_THREAD权限: 成功
PROCESS_DUP_HANDLE权限: 成功
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 成功
PROCESS_TERMINATE权限: 成功
PROCESS_VM_OPERATION权限: 成功
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 成功
进程名: PPSAP.exe 进程ID: 3596
PROCESS_ALL_ACCESS权限: 成功
PROCESS_CREATE_PROCESS权限: 成功
PROCESS_CREATE_THREAD权限: 成功
PROCESS_DUP_HANDLE权限: 成功
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 成功
PROCESS_TERMINATE权限: 成功
PROCESS_VM_OPERATION权限: 成功
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 成功
进程名: wmiprvse.exe 进程ID: 612
PROCESS_ALL_ACCESS权限: 失败
PROCESS_CREATE_PROCESS权限: 失败
PROCESS_CREATE_THREAD权限: 失败
PROCESS_DUP_HANDLE权限: 失败
PROCESS_QUERY_INFORMATION权限: 失败
PROCESS_SET_INFORMATION权限: 失败
PROCESS_TERMINATE权限: 失败
PROCESS_VM_OPERATION权限: 失败
PROCESS_VM_READ权限: 失败
PROCESS_VM_WRITE权限: 失败
进程名: PPAP.exe 进程ID: 3016
PROCESS_ALL_ACCESS权限: 成功
PROCESS_CREATE_PROCESS权限: 成功
PROCESS_CREATE_THREAD权限: 成功
PROCESS_DUP_HANDLE权限: 成功
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 成功
PROCESS_TERMINATE权限: 成功
PROCESS_VM_OPERATION权限: 成功
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 成功
进程名: Com4QLBEx.exe 进程ID: 2516
PROCESS_ALL_ACCESS权限: 失败
PROCESS_CREATE_PROCESS权限: 失败
PROCESS_CREATE_THREAD权限: 失败
PROCESS_DUP_HANDLE权限: 失败
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 失败
PROCESS_TERMINATE权限: 失败
PROCESS_VM_OPERATION权限: 失败
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 失败
进程名: CNAB4RPK.EXE 进程ID: 3716
PROCESS_ALL_ACCESS权限: 失败
PROCESS_CREATE_PROCESS权限: 失败
PROCESS_CREATE_THREAD权限: 失败
PROCESS_DUP_HANDLE权限: 失败
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 失败
PROCESS_TERMINATE权限: 失败
PROCESS_VM_OPERATION权限: 失败
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 失败
进程名: HpqToaster.exe 进程ID: 4032
PROCESS_ALL_ACCESS权限: 成功
PROCESS_CREATE_PROCESS权限: 成功
PROCESS_CREATE_THREAD权限: 成功
PROCESS_DUP_HANDLE权限: 成功
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 成功
PROCESS_TERMINATE权限: 成功
PROCESS_VM_OPERATION权限: 成功
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 成功
进程名: taskmgr.exe 进程ID: 1000
PROCESS_ALL_ACCESS权限: 成功
PROCESS_CREATE_PROCESS权限: 成功
PROCESS_CREATE_THREAD权限: 成功
PROCESS_DUP_HANDLE权限: 成功
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 成功
PROCESS_TERMINATE权限: 成功
PROCESS_VM_OPERATION权限: 成功
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 成功
进程名: QQ.exe 进程ID: 3480
PROCESS_ALL_ACCESS权限: 成功
PROCESS_CREATE_PROCESS权限: 成功
PROCESS_CREATE_THREAD权限: 成功
PROCESS_DUP_HANDLE权限: 成功
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 成功
PROCESS_TERMINATE权限: 成功
PROCESS_VM_OPERATION权限: 成功
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 成功
进程名: TXPlatform.exe 进程ID: 4004
PROCESS_ALL_ACCESS权限: 成功
PROCESS_CREATE_PROCESS权限: 成功
PROCESS_CREATE_THREAD权限: 成功
PROCESS_DUP_HANDLE权限: 成功
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 成功
PROCESS_TERMINATE权限: 成功
PROCESS_VM_OPERATION权限: 成功
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 成功
进程名: FetionFx.exe 进程ID: 2364
PROCESS_ALL_ACCESS权限: 成功
PROCESS_CREATE_PROCESS权限: 成功
PROCESS_CREATE_THREAD权限: 成功
PROCESS_DUP_HANDLE权限: 成功
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 成功
PROCESS_TERMINATE权限: 成功
PROCESS_VM_OPERATION权限: 成功
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 成功
进程名: conime.exe 进程ID: 3424
PROCESS_ALL_ACCESS权限: 成功
PROCESS_CREATE_PROCESS权限: 成功
PROCESS_CREATE_THREAD权限: 成功
PROCESS_DUP_HANDLE权限: 成功
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 成功
PROCESS_TERMINATE权限: 成功
PROCESS_VM_OPERATION权限: 成功
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 成功
进程名: Maxthon.exe 进程ID: 2888
PROCESS_ALL_ACCESS权限: 成功
PROCESS_CREATE_PROCESS权限: 成功
PROCESS_CREATE_THREAD权限: 成功
PROCESS_DUP_HANDLE权限: 成功
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 成功
PROCESS_TERMINATE权限: 成功
PROCESS_VM_OPERATION权限: 成功
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 成功
进程名: PPLive.exe 进程ID: 756
PROCESS_ALL_ACCESS权限: 成功
PROCESS_CREATE_PROCESS权限: 成功
PROCESS_CREATE_THREAD权限: 成功
PROCESS_DUP_HANDLE权限: 成功
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 成功
PROCESS_TERMINATE权限: 成功
PROCESS_VM_OPERATION权限: 成功
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 成功
进程名: hh.exe 进程ID: 5584
PROCESS_ALL_ACCESS权限: 成功
PROCESS_CREATE_PROCESS权限: 成功
PROCESS_CREATE_THREAD权限: 成功
PROCESS_DUP_HANDLE权限: 成功
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 成功
PROCESS_TERMINATE权限: 成功
PROCESS_VM_OPERATION权限: 成功
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 成功
进程名: MSDEV.EXE 进程ID: 4160
PROCESS_ALL_ACCESS权限: 成功
PROCESS_CREATE_PROCESS权限: 成功
PROCESS_CREATE_THREAD权限: 成功
PROCESS_DUP_HANDLE权限: 成功
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 成功
PROCESS_TERMINATE权限: 成功
PROCESS_VM_OPERATION权限: 成功
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 成功
进程名: NOTEPAD.EXE 进程ID: 4652
PROCESS_ALL_ACCESS权限: 成功
PROCESS_CREATE_PROCESS权限: 成功
PROCESS_CREATE_THREAD权限: 成功
PROCESS_DUP_HANDLE权限: 成功
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 成功
PROCESS_TERMINATE权限: 成功
PROCESS_VM_OPERATION权限: 成功
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 成功
进程名: XDict.exe 进程ID: 4760
PROCESS_ALL_ACCESS权限: 成功
PROCESS_CREATE_PROCESS权限: 成功
PROCESS_CREATE_THREAD权限: 成功
PROCESS_DUP_HANDLE权限: 成功
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 成功
PROCESS_TERMINATE权限: 成功
PROCESS_VM_OPERATION权限: 成功
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 成功
进程名: 枚举系统进程.exe 进程ID: 4280
PROCESS_ALL_ACCESS权限: 成功
PROCESS_CREATE_PROCESS权限: 成功
PROCESS_CREATE_THREAD权限: 成功
PROCESS_DUP_HANDLE权限: 成功
PROCESS_QUERY_INFORMATION权限: 成功
PROCESS_SET_INFORMATION权限: 成功
PROCESS_TERMINATE权限: 成功
PROCESS_VM_OPERATION权限: 成功
PROCESS_VM_READ权限: 成功
PROCESS_VM_WRITE权限: 成功
这个小程序可以用来测验一个进程所允许的权限，还是很有用滴