pid2.bas

提供进程监视[包括启动参数] 进程检测[包括启动参数] 网络连接检测 SSDT检测 BHO检测 IE插件检测 自启动项检测 -------程序部分[使用彩字显示] 包

Attribute VB_Name = "pid2"
Private Declare Function CreateToolhelp32Snapshot Lib "kernel32" (ByVal lFlags As Long, ByVal lProcessID As Long) As Long
Private Declare Function Process32First Lib "kernel32" (ByVal hSnapShot As Long, uProcess As PROCESSENTRY32) As Long
Private Declare Function Process32Next Lib "kernel32" (ByVal hSnapShot As Long, uProcess As PROCESSENTRY32) As Long
Private Declare Function CloseHandle Lib "kernel32" (ByVal hObject As Long) As Long
Private Type PROCESSENTRY32
    dwSize As Long
    cntUsage As Long
    th32ProcessID As Long
    th32DefaultHeapID As Long
    th32ModuleID As Long
    cntThreads As Long
    th32ParentProcessID As Long
    pcPriClassBase As Long
    dwFlags As Long
    szExeFile As String * 1024
End Type
Private Const TH32CS_SNAPPROCESS = &H2&
Public Function isPHide(ByVal pid As Long) As Boolean
Dim my As PROCESSENTRY32
Dim l As Long
Dim l1 As Long
Dim isHides As Boolean
Dim isHideD As Boolean
l = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0)
  If l Then
    my.dwSize = 1060
    If (Process32First(l, my)) Then
      Do
        If pid = my.th32ProcessID Then isHides = False: Exit Do Else isHides = True
      Loop Until (Process32Next(l, my) < 1)
     If isHides = False Then isPHide = False Else isPHide = True
     End If
     l1 = CloseHandle(l)
  End If
End Function