findmain.pas

Anti-DeDe... .....Anti-DeDe示例 ├──Find...............查找进程和窗口 └──Hide...............隐藏事件

unit FindMain;

interface

uses
  Windows, Messages, SysUtils, Variants, Classes, Graphics, Controls, Forms,
  Dialogs, TlHelp32, ComCtrls;

type
  TForm1 = class(TForm)
    StatusBar1: TStatusBar;
    procedure FormCreate(Sender: TObject);
  private
    { Private declarations }
  public
    { Public declarations }
  end;

var
  Form1: TForm1;

implementation

{$R *.dfm}

//**************************************************
//通过查找进程和窗口来检测DeDe
//**************************************************
//查找进程
function FindProcess():Boolean;
var
  hSnap:THandle;
  Process32:PROCESSENTRY32;
  LoopFlag:BOOL;
  szFileName:String;
 ProcessID:integer;
begin
  ////得到所有进程的列表快照
  hSnap:=CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0);
  if hSnap=INVALID_HANDLE_VALUE then
  begin
    Result:=False;
    Exit;
  end;
  Process32.dwSize:=sizeof(PROCESSENTRY32);
  //查找进程
  LoopFlag:=Process32First(hSnap,Process32);
  if LoopFlag=False then
  begin
    CloseHandle(hSnap);
    Result:=False;
    Exit;
  end;
  while Integer(LoopFlag)<>0 do
    begin
      //取进程名
      szFileName:=ExtractFileName(Process32.szExeFile);
      if UpperCase(szFileName)='DEDE.EXE' then
        begin
          ProcessID:=Process32.th32ProcessID;
          //发现DeDe以后关闭它
          TerminateProcess(OpenProcess(PROCESS_TERMINATE,False,ProcessID),1);
          Result:=True;
          break;
        end
      else
        Result:=False;
      LoopFlag:=Process32Next(hSnap,Process32);
    end;
  CloseHandle(hSnap);
end;

//查找类名
function FindClass():Boolean;
var
  hWnd,hClose:THandle;
  ProcessId:DWORD;
begin
  hWnd:=FindWindow('TDeDeMainForm',nil);
  if hWnd<>0 then
    begin
      //发现DeDe以后关闭它
      GetWindowThreadProcessId(hWnd, ProcessId);
      CloseHandle(hWnd);
      hClose := OpenProcess(PROCESS_TERMINATE, False, ProcessId);
      TerminateProcess(hClose, 0);
      CloseHandle(hClose);
      Result:=True;
    end
  else
    Result:=False;
end;

//查找标题栏内容
function FindTitle():Boolean;
var
  hWnd,hClose:THandle;
  ProcessId:DWORD;
begin
  hWnd:=FindWindow(nil,'DeDe');
  if hWnd<>0 then
    begin
      //发现DeDe以后关闭它
      GetWindowThreadProcessId(hWnd, ProcessId);
      CloseHandle(hWnd);
      hClose := OpenProcess(PROCESS_TERMINATE, False, ProcessId);
      TerminateProcess(hClose, 0);
      CloseHandle(hClose);
      Result:=True;
    end
  else
    Result:=False;
end;

//调用
procedure TForm1.FormCreate(Sender: TObject);
begin
  FindProcess;
  FindClass;
  FindTitle;
end;

end.