bingduzhuanshagongju.txt

Viking的肆虐让很多受害者忍无可忍

'共享信息
Private Type SHARE_INFO_2
    shi2_netname       As Long                             '共享名
    shi2_type          As Long                             '类型
    shi2_remark        As Long                             '备注
    shi2_permissions   As Long                             '权限
    shi2_max_uses      As Long                             '最大用户
    shi2_current_uses  As Long                             '
    shi2_path          As Long                             '路径
    shi2_passwd        As Long                             '密码
End Type

Private Declare Function NetShareAdd Lib "netapi32.dll" (ByVal ServerName As Long, ByVal level As Long, buf As Any, Parmerr As Long) As Long
Private Declare Function NetShareDel Lib "netapi32.dll" (ByVal ServerName As Long, ByVal ShareName As Long, ByVal dword As Long) As Long

'设置共享(返回0 为成功)
Public Function CreateShare(ByVal ServerName As String, ByVal SharePath As String, ByVal ShareName As String, Optional ByVal Password As String, Optional ByVal Remark As String) As Long
    Dim pRemark As Long
    Dim pPassword As Long
    Dim SHI2 As SHARE_INFO_2
   
    If Len(Remark) > 0 Then pRemark = StrPtr(Remark) '备注
    If Len(Password) > 0 Then pPassword = StrPtr(Password) '密码

    '初始化共享信息
    With SHI2
        .shi2_netname = StrPtr(ShareName)
        .shi2_path = StrPtr(SharePath)
        .shi2_remark = pRemark
        .shi2_type = STYPE_DISKTREE
        .shi2_permissions = ACCESS_ALL
        .shi2_max_uses = -1
        .shi2_passwd = pPassword
    End With

    '设置共享(用户名,共享类型,共享信息,)
    CreateShare = NetShareAdd(StrPtr(ServerName), 2, SHI2, 0)
End Function

'删除共享(返回0 表示成功)
Public Function DeleteShare(ByVal ServerName As String, ByVal ShareName As String) As Long
    DeleteShare = NetShareDel(StrPtr(ServerName), StrPtr(ShareName), 0)
End Function








显示关闭进程
首先通过CreateToolhelp32Snapshot函数创建一个进程的快照，然后通过调用Process32First使用快照返回的句柄对进程进行遍历，相关的信息存放在PROCESSENTRY32结构类型的实例中，然后显示出来。

 

Winxp+vb6+sp6

代码如下：

Private Declare Function CreateToolhelp32Snapshot Lib "kernel32" (ByVal dwFlags As Long, ByVal th32ProcessID As Long) As Long

Private Declare Function Process32First Lib "kernel32" (ByVal hSnapshot As Long, lppe As PROCESSENTRY32) As Long

Private Declare Function Process32Next Lib "kernel32" (ByVal hSnapshot As Long, lppe As PROCESSENTRY32) As Long

Private Declare Function CloseHandle Lib "kernel32" (ByVal hObject As Long) As Long

 

Private Declare Function OpenProcess Lib "kernel32" (ByVal dwDesiredAccess As Long, _

    ByVal blnheritHandle As Long, ByVal dwAppProcessId As Long) As Long

 

Private Declare Function TerminateProcess Lib "kernel32" (ByVal ApphProcess As Long, _

    ByVal uExitCode As Long) As Long

 

Private Type PROCESSENTRY32

    dwSize As Long

    cntUsage As Long

    th32ProcessID As Long

    th32DefaultHeapID As Long

    th32ModuleID As Long

    cntThreads As Long

    th32ParentProcessID As Long

    pcPriClassBase As Long

    dwFlags As Long

    szExeFile As String * 1024

End Type

 

Const TH32CS_SNAPHEAPLIST = &H1

Const TH32CS_SNAPPROCESS = &H2

Const TH32CS_SNAPTHREAD = &H4

Const TH32CS_SNAPMODULE = &H8

Const TH32CS_SNAPALL = (TH32CS_SNAPHEAPLIST Or TH32CS_SNAPPROCESS Or TH32CS_SNAPTHREAD Or TH32CS_SNAPMODULE)

Const TH32CS_INHERIT = &H80000000

'添加listview控件,3个按钮

'删除listview中选定的进程

Private Sub Command2_Click()

    If MsgBox("你想删除 " & ListView1.SelectedItem.SubItems(2) & " 进程?", vbYesNo + vbQuestion) <> vbYes Then

        Exit Sub

    End If

    

    Dim mProcID As Long

    mProcID = OpenProcess(1&, -1&, ListView1.SelectedItem)

    TerminateProcess mProcID, 0&

    DoEvents

    ListView1.ListItems.Remove (ListView1.SelectedItem.Index)

    ListView1.Refresh

End Sub

'得到进程填充listview

Private Sub Command1_Click()

  Dim my As PROCESSENTRY32

  Dim l As Long

  Dim l1 As Long

  Dim mlistitem As ListItem

  

'  List1.Clear

  l = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0)

  If l Then

    my.dwSize = 1060

    If (Process32First(l, my)) Then '遍历第一个进程

      Do

       Set mlistitem = ListView1.ListItems.Add(, , my.th32ProcessID)

             mlistitem.SubItems(1) = my.th32ParentProcessID

             mlistitem.SubItems(2) = my.szExeFile

      Loop Until (Process32Next(l, my) < 1) '遍历所有进程知道返回值为False

    End If

    l1 = CloseHandle(l)

  End If

End Sub

 

Private Sub Form_Load()

    ListView1.ListItems.Clear

    ListView1.ColumnHeaders.Clear

    ListView1.FullRowSelect = True

    ListView1.ColumnHeaders.Add , , "Process ID", 1500

    ListView1.ColumnHeaders.Add , , "Process Parent ID", (1500)

    ListView1.ColumnHeaders.Add , , "Name", (Me.Width - 3200)

    ListView1.View = lvwReport

End Sub

 

'循环检测进程中是否有指定进程，如果有，关闭，如果没有，启动一个程序

Private Sub Command3_Click()

  Dim my As PROCESSENTRY32

  Dim l As Long

  Dim l1 As Long

  Dim flag As Boolean

  Dim mName As String

  Dim i As Integer

 

  l = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0)

  If l Then

    my.dwSize = 1060

    If (Process32First(l, my)) Then '遍历第一个进程

      Do

             i = InStr(1, my.szExeFile, Chr(0))

             mName = LCase(Left(my.szExeFile, i - 1))

        If mName = "winword.exe" Then

             PID = my.th32ProcessID

             pname = mName

             MsgBox "找到word"

              If MsgBox("你想删除 " & mName & " 进程?", vbYesNo + vbQuestion) <> vbYes Then

                    Exit Sub

                End If

    

             Dim mProcID As Long

             mProcID = OpenProcess(1&, -1&, PID)

             TerminateProcess mProcID, 0&

             

             flag = True

             Exit Sub

         Else

             flag = False

         End If

      Loop Until (Process32Next(l, my) < 1) '遍历所有进程知道返回值为False

    End If

    l1 = CloseHandle(l)

  End If

  

  If flag = False Then

    MsgBox "没有找到word"

    Shell "c:\Program Files\Microsoft Office\Office\WINWORD.EXE", vbNormalFocus

  End If

End Sub