杀手归来！Process Killer 终于可以笑傲江湖了！

<style type="text/css"> .CodeFormat {font-family:"Courier New", Courier, mono; font-size:10pt; } </style> 继前2片《谋杀》系列失败后，

(1) 发现了在公司的电脑中影响Windows性能，造成硬盘唱狂响曲的罪魁祸首！
(2) 谋杀失败！可以杀掉Notepad.exe这样的进程，却对CcmExec.exe这个进程没有办法！

并没有放弃，彻底分析后，终于让Killer可以笑傲江湖了...

摘略如下:

之所以不能杀掉...最大的原因就是执行的程序的级别小于要杀掉的进程的级别，所以重点就是要解决这个问题！

代码如下：

  
  


   
   '
   
   '' API for Changing the Process' Privilege
   
    
   
   Private
   
    Declare 
   
   Function
   
    GetCurrentProcess Lib 
   
   "
   
   KERNEL32
   
   "
   
    () 
   
   As
   
    
   
   Long
   
    
   
   Private
   
    Declare 
   
   Function
   
    LookupPrivilegeValue Lib 
   
   "
   
   advapi32.dll
   
   "
   
    Alias 
   
   "
   
   LookupPrivilegeValueA
   
   "
   
    (ByVal lpSystemName 
   
   As
   
    
   
   String
   
   , ByVal lpName 
   
   As
   
    
   
   String
   
   , lpLuid 
   
   As
   
    LUID) 
   
   As
   
    
   
   Long
   
    
   
   Private
   
    Declare 
   
   Function
   
    AdjustTokenPrivileges Lib 
   
   "
   
   advapi32.dll
   
   "
   
    (ByVal TokenHandle 
   
   As
   
    
   
   Long
   
   , ByVal DisableAllPrivileges 
   
   As
   
    
   
   Long
   
   , NewState 
   
   As
   
    TOKEN_PRIVILEGES, ByVal BufferLength 
   
   As
   
    
   
   Long
   
   , PreviousState 
   
   As
   
    TOKEN_PRIVILEGES, ReturnLength 
   
   As
   
    
   
   Long
   
   ) 
   
   As
   
    
   
   Long
   
    
   
   Private
   
    Declare 
   
   Function
   
    OpenProcessToken Lib 
   
   "
   
   advapi32.dll
   
   "
   
    (ByVal ProcessHandle 
   
   As
   
    
   
   Long
   
   , ByVal DesiredAccess 
   
   As
   
    
   
   Long
   
   , TokenHandle 
   
   As
   
    
   
   Long
   
   ) 
   
   As
   
    
   
   Long
   
    
   
   '
   
   '' Adjust Priviledges
   
    
   
   Sub
   
    AdjustSelfTokenPrivileges()


   
   Dim
   
    hdlProcessHandle 
   
   As
   
    
   
   Long
   
    
   
   Dim
   
    hdlTokenHandle 
   
   As
   
    
   
   Long
   
    
   
   Dim
   
    tmpLuid 
   
   As
   
    LUID

   
   Dim
   
    tkp 
   
   As
   
    TOKEN_PRIVILEGES

   
   Dim
   
    tkpNewButIgnored 
   
   As
   
    TOKEN_PRIVILEGES

   
   Dim
   
    lBufferNeeded 
   
   As
   
    
   
   Long
   
    
   
   Dim
   
    lp 
   
   As
   
    
   
   Long
   
    hdlProcessHandle 
   
   =
   
    GetCurrentProcess()
 lp 
   
   =
   
    OpenProcessToken(hdlProcessHandle, TOKEN_ALL_ACCESS, hdlTokenHandle)
 lp 
   
   =
   
    LookupPrivilegeValue(
   
   ""
   
   , 
   
   "
   
   SeDebugPrivilege
   
   "
   
   , tmpLuid)
 tkp.PrivilegeCount 
   
   =
   
    
   
   1
   
    tkp.Privileges(
   
   0
   
   ).pLuid 
   
   =
   
    tmpLuid
 tkp.Privileges(
   
   0
   
   ).Attributes 
   
   =
   
    SE_PRIVILEGE_ENABLED
 lp 
   
   =
   
    AdjustTokenPrivileges(hdlTokenHandle, 
   
   False
   
   , tkp, 
   
   Len
   
   (tkpNewButIgnored), tkpNewButIgnored, lBufferNeeded)
   
   

End Sub

  
  

可以看到提高了Process Privilege后，就可以了！



同时，增加了2个特性，一个是从ini文件中读取配置信息：


另外一个是最小化到系统栏中，单击或双击托盘图标后恢复窗口：


改了这么多地方，就给他叫1.5.0版吧...

活活，正好赶上Firefox目前的主流版本...^ ^!