A
aKnightChen
Unregistered / Unconfirmed
GUEST, unregistred user!
现在公司中有个病毒,进程和系统进程相同,
现我想扫出来,但无法区分是系统进程还是用户进程,
哪位大哥能教我一下?
附我的方法:
uses TLHelp32;
procedure TForm1.Button1Click(Sender: TObject);
var
lppe: TProcessEntry32;
found : boolean;
Hand : THandle;
begin
Hand := CreateToolhelp32Snapshot(TH32CS_SNAPALL,0);
found := Process32First(Hand,lppe);
while found do
begin
ListBox1.Items.Add(StrPas(lppe.szExeFile));
found := Process32Next(Hand,lppe);
end;
end;
现我想扫出来,但无法区分是系统进程还是用户进程,
哪位大哥能教我一下?
附我的方法:
uses TLHelp32;
procedure TForm1.Button1Click(Sender: TObject);
var
lppe: TProcessEntry32;
found : boolean;
Hand : THandle;
begin
Hand := CreateToolhelp32Snapshot(TH32CS_SNAPALL,0);
found := Process32First(Hand,lppe);
while found do
begin
ListBox1.Items.Add(StrPas(lppe.szExeFile));
found := Process32Next(Hand,lppe);
end;
end;