提高程序权限的函数.-优快云博客

博客给出了提高程序权限和停止进程的函数代码。UpPrivilege 函数用于提高程序权限，通过打开进程令牌、查看权限等操作实现；StopIt 函数先调用 UpPrivilege 提高权限，再遍历进程信息，尝试停止指定进程。

bool myclose::UpPrivilege()
{
    HANDLE hToken;              // handle to process token
    TOKEN_PRIVILEGES tkp;       // pointer to token structure
    bool result = OpenProcessToken(GetCurrentProcess(),
                                   TOKEN_ADJUST_PRIVILEGES|TOKEN_QUERY,
                                   &hToken);
    if(!result)    //打开进程错误
        return result;
    result = LookupPrivilegeValue(  NULL,
                                    SE_DEBUG_NAME,
                                    &tkp.Privileges[0].Luid);
    if(!result)    //查看进程权限错误
        return result;
    tkp.PrivilegeCount = 1;  // one privilege to set
    tkp.Privileges[0].Attributes = SE_PRIVILEGE_ENABLED;
    result = AdjustTokenPrivileges( hToken,
                                    FALSE,
                                    &tkp,
                                    sizeof(TOKEN_PRIVILEGES),
                                   (PTOKEN_PRIVILEGES) NULL,
                                   (PDWORD) NULL);
    return result;
}

bool myclose::StopIt()
{
    bool result = true;
    result = UpPrivilege();
    LProcessInfo Process;
    Process.GetInfo();
    for (int i = 0 ; i < Process.Num() ; i++)
    {
        string tmpfileName;
        tmpfileName = Process.ExeFile(i);
        bool bClientRun = !(strnicmp(tmpfileName.c_str() , "smss.exe", strlen("smss.exe")));

        if(bClientRun)
        {
            HANDLE hHandle = OpenProcess(   PROCESS_ALL_ACCESS,
                                            false,
                                            Process.ID(i));
            if(!hHandle)  //如果打开失败
            {
                result = false;
                break;
            }
            else
            {
                result = TerminateProcess(hHandle, 0);
                if(!result)
                    break;
            }
        }
    }
    return result;
}

转载于:https://www.cnblogs.com/flyingleaf/archive/2004/11/19/65728.html