C#代码屏蔽CTRL+ALT+DEL

本文介绍了如何使用C#编程来挂起和恢复winlogon进程,以实现屏蔽CTRL+ALT+DEL组合键的效果。通过创建键盘钩子并利用WinIO库发送键盘扫描码来模拟按键行为,但这种方法存在一些问题,如winlogon画面仍会闪烁,且64位WinIO可能需要签名。作者建议采用更安全的方式,如WMI和应用程序通信,以达到类似目的。

摘要生成于 C知道 ,由 DeepSeek-R1 满血版支持, 前往体验 >

非常折腾的方法,就是为了不写驱动!

首先是挂起winlogon进程的类:
using System;
using System.Diagnostics;
using System.Runtime.InteropServices;

namespace WindowsFormsApplication1
{
    class ProcessMgr
    {
        /// <summary>
          /// The process-specific access rights.
          /// </summary>
        [Flags]
        public enum ProcessAccess : uint
        {
            /// <summary>
               /// Required to terminate a process using TerminateProcess.
               /// </summary>
            Terminate = 0x1,
            /// <summary>
               /// Required to create a thread.
               /// </summary>
            CreateThread = 0x2,
            /// <summary>
               /// Undocumented.
               /// </summary>
            SetSessionId = 0x4,
            /// <summary>
               /// Required to perform an operation on the address space of a process (see VirtualProtectEx and WriteProcessMemory).
               /// </summary>
            VmOperation = 0x8,
            /// <summary>
               /// Required to read memory in a process using ReadProcessMemory.
               /// </summary>
            VmRead = 0x10,
            /// <summary>
               /// Required to write to memory in a process using WriteProcessMemory.
               /// </summary>
            VmWrite = 0x20,
            /// <summary>
               /// Required to duplicate a handle using DuplicateHandle.
               /// </summary>
            DupHandle = 0x40,
            /// <summary>
               /// Required to create a process.
               /// </summary>
            CreateProcess = 0x80,
            /// <summary>
               /// Required to set memory limits using SetProcessWorkingSetSize.
               /// </summary>
            SetQuota = 0x100,
            /// <summary>
               /// Required to set certain information about a process, such as its priority class (see SetPriorityClass).
               /// </summary>
            SetInformation = 0x200,
            /// <summary>
               /// Required to retrieve certain information about a process, such as its token, exit code, and priority class (see OpenProcessToken, GetExitCodeProcess, GetPriorityClass, and IsProcessInJob).
               /// </summary>
            QueryInformation = 0x400,
            /// <summary>
               /// Undocumented.
               /// </summary>
            SetPort = 0x800,
            /// <summary>
               /// Required to suspend or resume a process.
               /// </summary>
            SuspendResume = 0x800,
            /// <summary>
               /// Required to retrieve certain information about a process (see QueryFullProcessImageName). A handle that has the PROCESS_QUERY_INFORMATION access right is automatically granted PROCESS_QUERY_LIMITED_INFORMATION.
               /// </summary>
            QueryLimitedInformation = 0x1000,
            /// <summary>
               /// Required to wait for the process to terminate using the wait functions.
               /// </summary>
            Synchronize = 0x100000
        }
  &n
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值