木马编程天天练 进入第3天 服务管理
服务函数
下面的函数用于被服务执行或者使用
函数 描述
Handler An application-defined callback function used with the RegisterServiceCtrlHandler function.
HandlerEx
RegisterServiceCtrlHandler 注册一个函数处理控制码请求。
RegisterServiceCtrlHandlerEx
ServiceMain 服务程序入口函数。
SetServiceBits Registers a service type with the service control manager and the Server service.
SetServiceStatus Updates the service control manager's status information for the calling service.
StartServiceCtrlDispatcher Connects the main thread of a service process to the service control manager.
下面的函数被用于管理和配置服务
函数 描述
ChangeServiceConfig 改变服务的开机运行状态。
ChangeServiceConfig2 改变服务的描述。
CloseServiceHandle 关闭服务句柄。
ControlService 在一个服务已经被开启的情况下，向这个服务发出控制码。
ControlServiceEx
CreateService 创建一个服务对象，并增加它到服务控制管理数据库。
DeleteService 在服务控制管理数据库中标示要删除的服务。
EnumDependentServices 获取服务管理数据库中所有服务的名称和当前状态。
EnumServicesStatusEx
GetServiceDisplayName 获取服务的描述。
GetServiceKeyName Retrieves the service name of the specified service.
NotifyBootConfigStatus Reports the boot status to the service control manager.
NotifyServiceStatusChange Enables an application to receive notification when the specified service is created or
deleted or when its status changes.
OpenSCManager 和指定机器的服务控制管理器建立连接并打开服务控制管理器数据库。
OpenService 打开一个存在的服务。
QueryServiceConfig
QueryServiceConfig2
QueryServiceObjectSecurity Retrieves a copy of the security descriptor associated with a service object.
QueryServiceStatusEx 查询服务程序现在的运行状态。
SetServiceObjectSecurity Sets the security descriptor of a service object.
StartService 开启一个服务。
废弃函数
下面的函数已经被废弃。
EnumServicesStatus
LockServiceDatabase
QueryServiceLockStatus
QueryServiceStatus
UnlockServiceDatabase
Build date: 12/3/2009
程序例子：
#include<windows.h>
#include<stdio.h>
bool Start_Service(wchar_t * ServiceName);
bool Stop_Service(wchar_t * ServiceName);
bool Create_Service(wchar_t * ServiceName);
bool Delete_Service(wchar_t * ServiceName);
void ReconfigureService(wchar_t * ServiceName, wchar_t * ServiceDes);
void ChangeServiceRun(wchar_t * ServiceName);
void EnumService(void);
int main()
{
wchar_t * ServiceDisp = L"快速缓存服务，为网络文件交换提供缓存，提高网络连接速度。";
//Start_Service(L"WmdmPmSN");
//Stop_Service(L"WmdmPmSN");
//Create_Service(L"ServiceTest");
//Delete_Service(L"ServiceTest");
//ReconfigureService(L"ServiceTest",ServiceDisp);
ChangeServiceRun(L"WmdmPmSN");
EnumService();
return 0;
}
bool Start_Service(wchar_t * ServiceName)
{
SC_HANDLE schSCManager = OpenSCManager(NULL,NULL,SC_MANAGER_ALL_ACCESS);
if(NULL != schSCManager)
{
// L"WmdmPmSN"
SC_HANDLE schService = OpenService(schSCManager,ServiceName,SERVICE_ALL_ACCESS);
if( NULL != schService)
{
if(StartService(schService,0,NULL))
{
CloseServiceHandle(schService);
CloseServiceHandle(schSCManager);
return 1;
}
CloseServiceHandle(schService);
CloseServiceHandle(schSCManager);
wprintf(L"Start Service failed!/n");
return 0;
}
CloseServiceHandle(schSCManager);
wprintf(L"Open Service failed!/n");
return 0;
}
wprintf(L"OpenSCManager failed!/n");
CloseServiceHandle(schSCManager);
return 0;
}
bool Stop_Service(wchar_t * ServiceName)
{
SC_HANDLE schSCManager = OpenSCManager(NULL,NULL,SC_MANAGER_ALL_ACCESS);
if(NULL != schSCManager)
{
// L"WmdmPmSN"
SC_HANDLE schService = OpenService(schSCManager,ServiceName,SERVICE_ALL_ACCESS);
if( NULL != schService)
{
SERVICE_STATUS ServiceStatus;
if(ControlService(schService,SERVICE_CONTROL_STOP,&ServiceStatus))
{
CloseServiceHandle(schService);
CloseServiceHandle(schSCManager);
return 1;
}
CloseServiceHandle(schService);
CloseServiceHandle(schSCManager);
wprintf(L"Start Service failed!/n");
return 0;
}
CloseServiceHandle(schSCManager);
wprintf(L"Open Service failed!/n");
return 0;
}
wprintf(L"OpenSCManager failed!/n");
CloseServiceHandle(schSCManager);
return 0;
}
bool Create_Service(wchar_t * ServiceName)
{
SC_HANDLE schSCManager = OpenSCManager(NULL,NULL,SC_MANAGER_ALL_ACCESS);
if(NULL != schSCManager)
{
wchar_t * DisplayName = L"Service Program Test/n";
wchar_t * FilePathName = L"d://cyuyan//servicetest.exe";
SC_HANDLE schService = CreateService(
schSCManager,
ServiceName,
DisplayName,
SC_MANAGER_ALL_ACCESS,
SERVICE_WIN32_OWN_PROCESS,
SERVICE_AUTO_START,
SERVICE_ERROR_IGNORE,
FilePathName,
NULL,
NULL,
NULL,
NULL,
NULL);
if(schService != NULL)
{
CloseServiceHandle(schService);
CloseServiceHandle(schSCManager);
return 1;
}
else
{
CloseServiceHandle(schSCManager);
return 0;
}
}
else
return 0;
}
bool Delete_Service(wchar_t * ServiceName)
{
SC_HANDLE schSCManager = OpenSCManager(NULL,NULL,SC_MANAGER_ALL_ACCESS);
if(NULL != schSCManager)
{
// L"WmdmPmSN"
SC_HANDLE schService = OpenService(schSCManager,ServiceName,SERVICE_ALL_ACCESS);
if( NULL != schService)
{
SERVICE_STATUS ServiceStatus;
QueryServiceStatus(schService,&ServiceStatus);
if(ServiceStatus.dwCurrentState != SERVICE_STOPPED)
{
ControlService(schService,SERVICE_CONTROL_STOP,&ServiceStatus);
}
DeleteService(schService);
CloseServiceHandle(schService);
CloseServiceHandle(schSCManager);
return 1;
}
else
wprintf(L"Open Service failed!/n");
return 0;
}
else
{
wprintf(L"OpenSCManager failed!/n");
CloseServiceHandle(schSCManager);
return 0;
}
}
void ReconfigureService(wchar_t * ServiceName, wchar_t * ServiceDisp)
{
SC_HANDLE schSCManager = OpenSCManager(NULL, NULL, SC_MANAGER_ALL_ACCESS);
if (schSCManager != NULL)
{
// Need to acquire database lock before reconfiguring.
SC_LOCK sclLock = LockServiceDatabase(schSCManager);
if (sclLock != NULL)
{
// Open a handle to the service.
SC_HANDLE schService = OpenService(
schSCManager, // SCManager database
ServiceName, // name of service
SERVICE_CHANGE_CONFIG); // need CHANGE access
if (schService != NULL)
{
SERVICE_DESCRIPTION sdBuf;
sdBuf.lpDescription = ServiceDisp;
if (ChangeServiceConfig2(schService, SERVICE_CONFIG_DESCRIPTION, &sdBuf))
{
MessageBox(NULL,L"Change SUCCESS",L" ",MB_OK);
}
CloseServiceHandle(schService);
}
UnlockServiceDatabase(sclLock);
}
CloseServiceHandle(schSCManager);
}
}
void ChangeServiceRun(wchar_t * ServiceName)
{
SC_HANDLE schSCManager = OpenSCManager(NULL,NULL,SC_MANAGER_ALL_ACCESS);
if(NULL != schSCManager)
{
// L"WmdmPmSN"
SC_HANDLE schService = OpenService(schSCManager,ServiceName,SERVICE_ALL_ACCESS);
if( NULL != schService)
{
if(ChangeServiceConfig(
schService,
SERVICE_NO_CHANGE,
SERVICE_AUTO_START,
SERVICE_NO_CHANGE,
NULL,
NULL,
NULL,
NULL,
NULL,
NULL,
NULL))
{
wprintf(L"Change Service done!/n");
return;
}
CloseServiceHandle(schService);
CloseServiceHandle(schSCManager);
}
wprintf(L"Open Service failed!/n");
}
wprintf(L"OpenSCManager failed!/n");
CloseServiceHandle(schSCManager);
}
void EnumService(void)
{
LPENUM_SERVICE_STATUS st;
st=(LPENUM_SERVICE_STATUS)LocalAlloc(LPTR,64*1024);
DWORD ret=0;
DWORD size=0;
SC_HANDLE sc=OpenSCManager(NULL,NULL,SC_MANAGER_ALL_ACCESS);
EnumServicesStatus(sc,SERVICE_WIN32,SERVICE_STATE_ALL, (LPENUM_SERVICE_STATUS)st,1024*64,&size,&ret,NULL);
for(int i=0;i<ret;i++){
wprintf(L"%-20s%-50s",st[i].lpServiceName,st[i].lpDisplayName);
switch(st[i].ServiceStatus.dwCurrentState){
case(SERVICE_RUNNING):
wprintf(L"running/n");
break;
case(SERVICE_STOPPED):
wprintf(L"stopped/n");
break;
}
}
}
======================================================
控制windows防火墙代码
BOOL ControlWinFW(DWORD dwControl)
{
SERVICE_STATUS sStatus;
SC_HANDLE hSCMService = OpenSCManager(NULL,NULL,SC_MANAGER_ALL_ACCESS);
SC_HANDLE hService = OpenService(hSCMService,L"SharedAccess",SERVICE_ALL_ACCESS);
BOOL result = ControlService(hService,dwControl, &sStatus);
CloseServiceHandle(hService);
CloseServiceHandle(hSCMService);
return result;
}