C# .NET鎖屏程序（順帶屏蔽任務管理器）

時間 2020-05-08

標籤 c# 程序順帶屏蔽任務管理器欄目 C# 简体版

原文原文鏈接

第一步：將窗體的FormBorderStyle設置爲none，WindowState設爲Maximizedhtml

佔據整個屏幕。api

第二步：使用鉤子監控全局鍵盤事件。即屏蔽掉大部分系統熱鍵。可是屏蔽ctrl+alt+del 任務管理器則較複雜，這個特例後面討論。函數

使用全局鉤子應該注意的地方：將代碼放到一個獨立的類庫裏面（只有dll才能被注射到其餘進程中）。this

using System;
using System.Collections.Generic;
using System.Text;
using System.Runtime.InteropServices;
using System.IO;
using System.Reflection;

namespace KeyboardHookDLL
{
    public class KeyboardHook
    {
        public delegate int KeyboardProc(int nCode, IntPtr wParam, IntPtr lParam);

        static int hKeyboardHook = 0;
        KeyboardProc KeyboardHookProcedure;

        /// <summary>
        /// 鉤子函數,須要引用空間(using System.Reflection;)
        /// 線程鉤子監聽鍵盤消息設爲2,全局鉤子監聽鍵盤消息設爲13
        /// 線程鉤子監聽鼠標消息設爲7,全局鉤子監聽鼠標消息設爲14
        /// </summary>

        public const int WH_KEYBOARD = 13;
        public const int WH_MOUSE_LL = 14;

        public struct KeyboardMSG
        {
            public int vkCode;
            public int scanCode;
            public int flags;
            public int time;
            public int dwExtraInfo;

        }
        //private FileStream MyFs;

//各類鍵位的ASC碼
        private const byte LLKHF_ALTDOWN = 0x20;
        private const byte VK_CAPITAL = 0x14;
        private const byte VK_ESCAPE = 0x1B;
        private const byte VK_F4 = 0x73;
        private const byte VK_LCONTROL = 0xA2;
        private const byte VK_NUMLOCK = 0x90;
        private const byte VK_RCONTROL = 0xA3;
        private const byte VK_SHIFT = 0x10;
        private const byte VK_TAB = 0x09;
        //public const int WH_KEYBOARD = 13;
        private const int WH_KEYBOARD_LL = 13;
        private const int WH_MOUSE = 7;
        //private const int WH_MOUSE_LL = 14;
        private const int WM_KEYDOWN = 0x100;
        private const int WM_KEYUP = 0x101;
        private const int WM_LBUTTONDBLCLK = 0x203;
        private const int WM_LBUTTONDOWN = 0x201;
        private const int WM_LBUTTONUP = 0x202;
        private const int WM_MBUTTONDBLCLK = 0x209;
        private const int WM_MBUTTONDOWN = 0x207;
        private const int WM_MBUTTONUP = 0x208;
        private const int WM_MOUSEMOVE = 0x200;
        private const int WM_MOUSEWHEEL = 0x020A;
        private const int WM_RBUTTONDBLCLK = 0x206;
        private const int WM_RBUTTONDOWN = 0x204;
        private const int WM_RBUTTONUP = 0x205;
        private const int WM_SYSKEYDOWN = 0x104;
        private const int WM_SYSKEYUP = 0x105;
        //private static int hKeyboardHook = 0;

        /// <summary>
        /// vs2008中的聲明方法，在vs2010中略有不一樣

        /// </summary>
        /// <returns></returns>
        [DllImport("kernel32")]
        public static extern int GetCurrentThreadId();

        [DllImport("user32.dll", CharSet = CharSet.Auto, CallingConvention =

CallingConvention.StdCall)]
        public static extern int SetWindowsHookEx(int idHook, KeyboardProc lpfn, IntPtr

hInstance, int threadId);

        [DllImport("user32.dll", CharSet = CharSet.Auto, CallingConvention =

CallingConvention.StdCall)]
        public static extern bool UnhookWindowsHookEx(int idHook);

        [DllImport("user32.dll", CharSet = CharSet.Auto, CallingConvention = CallingConvention.StdCall)]
        public static extern int CallNextHookEx(int idHook, int nCode, IntPtr wParam, IntPtr lParam);

        [DllImport("user32.dll", CharSet = CharSet.Auto, CallingConvention = CallingConvention.Winapi)]
        public static extern short GetKeyState(int keycode);

//在這裏你能夠本身定義要攔截的鍵。
        private int KeyboardHookProc(int nCode, IntPtr wParam, IntPtr lParam)
        {
            KeyboardMSG m = (KeyboardMSG)Marshal.PtrToStructure(lParam, typeof(KeyboardMSG));
             if (
            ((int)m.vkCode == 91) || ((int)m.vkCode == 92) ||
            //兩個組合鍵
            ((m.vkCode == VK_TAB) && ((m.flags & LLKHF_ALTDOWN) != 0)) ||

            ((m.vkCode == VK_ESCAPE) && ((m.flags & LLKHF_ALTDOWN) != 0)) ||
            ((m.vkCode == VK_F4) && ((m.flags & LLKHF_ALTDOWN) != 0)) ||
            //用於三個組合鍵
            (m.vkCode == VK_ESCAPE) && ((GetKeyState(VK_LCONTROL) & 0x8000) != 0) ||
            ((int)m.vkCode >= 65 && (int)m.vkCode <= 90 && ((GetKeyState(0x12) & 0x8000) != 0) ) ||
            ((int)m.vkCode >= 65 && (int)m.vkCode <= 90&& ((GetKeyState(0x11) & 0x8000) != 0)) ||
            (m.vkCode == VK_ESCAPE) && ((GetKeyState(VK_RCONTROL) & 0x8000) != 0)
            )
            {
                return 1;
            }
            return CallNextHookEx(hKeyboardHook, nCode, wParam, lParam);
        }
   // 安裝鉤子
        public void KeyMaskStart()
        {
            if (hKeyboardHook == 0)
            {
                // 建立HookProc實例
                KeyboardHookProcedure = new KeyboardProc(KeyboardHookProc);

                // 設置線程鉤子
                hKeyboardHook = SetWindowsHookEx(WH_KEYBOARD, KeyboardHookProcedure,
                    Marshal.GetHINSTANCE(Assembly.GetExecutingAssembly().GetModules()[0]), 0);
                // 若是設置鉤子失敗
                if (hKeyboardHook == 0)
                {
                    KeyMaskStop();
                    throw new Exception("SetWindowsHookEx failed.");
                }
                ////用二進制流的方法打開任務管理器。並且不關閉流.這樣任務管理器就打開不了
                //MyFs = new FileStream(Environment.ExpandEnvironmentVariables("%windir%\\system32\\taskmgr.exe"),
                //FileMode.Open);
                //byte[] MyByte = new byte[(int)MyFs.Length];
                //MyFs.Write(MyByte, 0, (int)MyFs.Length);
            }
        }

        // 卸載鉤子
        public void KeyMaskStop()
        {
            bool retKeyboard = true;
            if (hKeyboardHook != 0)
            {
                retKeyboard = UnhookWindowsHookEx(hKeyboardHook);
                hKeyboardHook = 0;
            }
            if (!(retKeyboard))
            {
                throw new Exception("UnhookWindowsHookEx  failed.");
            }
        }
    }
}

第三步：這個時候你會發現，程序能屏蔽大部分的熱鍵了，惟獨ctrl+alt+del，你不管怎麼去攔截，只要你按下這三個鍵，任務管理器活靈活現的出來了。spa

緣由：這個組合鍵是系統級別滴（惟一的，ctrl+shift+esc不是）。普通的軟件攔截是木有用的。得驅動級啥的才行吧。線程

既然如此，就只能轉換思路了。既然不能治本，治標也行，只要能達到目的。code

思路有兩個：1是讓任務管理器一旦運行就被結束，讓用戶不能操做。2是讓任務管理器以另外的方式先運行並隱藏起來，用戶就不能運行了。orm

思路1的代碼：使用timer控件htm

//引用這個空間using System.Diagnostics;
        private void timer1_Tick(object sender, EventArgs e)
        {
            Process[] p = Process.GetProcesses();

            foreach (Process p1 in p)
            {
                try
                {
                    if (p1.ProcessName.ToLower().Trim() == "taskmgr")//這裏判斷是任務管理器   
                    {
                        p1.Kill();
                        return;
                    }
                }
                catch
                {
                    return;
                }
            }
        }

思路2有兩個比較好的辦法blog

還有個不咋滴的辦法，就是以文件流的方式打開taskmgr.exe（代碼在上面的KeyboardHookDLL中能找到），在xp下還行，到win7下面就會有提示了。

辦法1：以隱藏的方式運行。

using System;
using System.Collections.Generic;
using System.ComponentModel;
using System.Data;
using System.Drawing;
using System.Text;
using System.Windows.Forms;
using Microsoft.Win32;
using System.Diagnostics;
using System.Runtime.InteropServices;

namespace KidWorld
{
    public partial class Form1 : Form
    {

        [DllImport("user32.dll")]

        public static extern int FindWindow(string lpClassName, string lpWindowName);

        [DllImport("User32.dll")]

        public static extern Int32 SendMessage(

        int hWnd, // handle to destination window

        int Msg, // message

        int wParam, // first message parameter

        int lParam); // second message parameter
        public Form1()
        {
            InitializeComponent();
        }


        private void Form1_Load(object sender, EventArgs e)
        {

            Process p = new Process();

            p.StartInfo.WorkingDirectory = Environment.GetFolderPath(Environment.SpecialFolder.System);

            p.StartInfo.FileName = "taskmgr.exe";

            p.StartInfo.CreateNoWindow = true;

            p.StartInfo.WindowStyle = ProcessWindowStyle.Hidden;

            p.Start();

        }

        private void Form1_FormClosing(object sender, FormClosingEventArgs e)
        {

            const int WM_CLOSE = 0x0010;

            int taskManager = FindWindow("#32770", "Windows Task Manager");

            SendMessage(taskManager, WM_CLOSE, 0, 0);

        }

   
    }
}

辦法2：

private void Form1_Load(object sender, EventArgs e)
        {

            //this.Text =Environment.GetFolderPath( Environment.SpecialFolder.System).ToString();

            blockTaskMgr();
          
        }

        void blockTaskMgr() {

            //阻塞其餘程序讀取
            Stream oStream = File.Open(@"C:\WINDOWS\system32\taskmgr.exe", FileMode.OpenOrCreate, FileAccess.Write);


        }

到這裏鎖屏就完成鳥。

龍弟弟整理過來的，看到這文章的大大們，求關注求評論各類求,龍弟弟先謝謝鳥.......

相關標籤/搜索

每日一句

每一个你不满意的现在，都有一个你没有努力的曾经。