文件禁止删除

最新推荐文章于 2024-07-26 22:51:11 发布

weixin_33747129

最新推荐文章于 2024-07-26 22:51:11 发布

阅读量183

点赞数

CC 4.0 BY-SA版权

原文链接：http://www.cnblogs.com/bsoom/archive/2009/11/15/1603356.html

Code
program createfile;
uses
  Windows, SysUtils;
//提权函数
procedure SetPrivilege;
var
  TPPrev, TP: TTokenPrivileges;
  TokenHandle: THandle;
  dwRetLen: DWORD;
  lpLuid: TLargeInteger;
begin
  OpenProcessToken(GetCurrentProcess, TOKEN_ALL_ACCESS, TokenHandle);
  if (LookupPrivilegeValue(nil, ’SeDebugPrivilege’, lpLuid)) then
  begin
    TP.PrivilegeCount := 1;
    TP.Privileges[0].Attributes := SE_PRIVILEGE_ENABLED;
    TP.Privileges[0].Luid := lpLuid;
    AdjustTokenPrivileges(TokenHandle, False, TP, SizeOf(TPPrev), TPPrev, dwRetLen);
  end;
  CloseHandle(TokenHandle);
end;
procedure OccupyFile(lpFileName: string);
var
  hProcess, hFile, hTargetHandle: thandle;
begin
　//打开一个pid为４的进程，只要是存在的进程，都可以
  hProcess := OpenProcess(PROCESS_DUP_HANDLE, FALSE, 4);
  if (hProcess = 0) then exit;
  //以独占模式打开目标文件
  hFile := CreateFileA(PChar(lpFileName), GENERIC_READ, 0, 0, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, 0);
  if (hFile = INVALID_HANDLE_VALUE) then
  begin
    CloseHandle(hProcess);
    exit;
  end;
  //把文件句柄复制到pid=4的进程中去，这样，只要pid=4的进程不退出，谁也动不了目标文件
  DuplicateHandle(GetCurrentProcess(), hFile, hProcess, @hTargetHandle, 0, FALSE, DUPLICATE_SAME_ACCESS or DUPLICATE_CLOSE_SOURCE);
  CloseHandle(hProcess);
end;
begin
  SetPrivilege;
  OccupyFile(’D:\Program Files\工具软件\任务管理.exe’);//这是要保护的程序名
end.

转载于:https://www.cnblogs.com/bsoom/archive/2009/11/15/1603356.html