【转帖】利用WMI编写的任务管理器(VB6.0)

阿杰

<table cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td>
<div style="TEXT-INDENT: 24px; WORD-WRAP: break-word; FONT-SIZE: 9pt; OVERFLOW: hidden; WORD-BREAK: break-all" id="textstyle_1">
<div class="msgheader">QUOTE:</div><div class="msgborder">
<p><font face="Verdana"><br/>Option Explicit<br/>'显示XP风格函数<br/>Private Declare Sub InitCommonControls Lib "comctl32.dll" ()<br/>'显示消息函数<br/>Private Declare Function MessageBox Lib "user32" Alias "MessageBoxA" (ByVal hwnd As Long, ByVal lpText As String, ByVal lpCaption As String, ByVal wType As Long) As Long<br/>'进程创建事件<br/>Private WithEvents CreateProcessEvent As SWbemSink<br/>Attribute CreateProcessEvent.VB_VarHelpID = -1<br/>'进程结束事件<br/>Private WithEvents DeleteProcessEvent As SWbemSink<br/>Attribute DeleteProcessEvent.VB_VarHelpID = -1<br/>'进程属性更改事件<br/>Private WithEvents ModificationProcessEvent As SWbemSink<br/>Attribute ModificationProcessEvent.VB_VarHelpID = -1</font></p>
<p><font face="Verdana">Private Sub cmdExit_Click()<br/>&nbsp;&nbsp;&nbsp; Unload Me<br/>End Sub</font></p>
<p><font face="Verdana">Private Sub Form_Initialize()<br/>&nbsp;&nbsp;&nbsp; '显示XP风格<br/>&nbsp;&nbsp;&nbsp; InitCommonControls<br/>End Sub</font></p>
<p><font face="Verdana">Private Sub cmdAbout_Click()<br/>&nbsp;&nbsp;&nbsp; MessageBox 0, "欢迎你使用Chenhui530编写的“WMI进程管理器”实例源码！如" &amp; vbNewLine &amp; "果你在使用中发现有什么问题请及时通过以下方式转告联系我。" &amp; Chr(13) &amp; "QQ号码： 285305530,335429&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 附加消息：“VB技术交流”" &amp; vbNewLine &amp; "邮箱:Chenhui00530@163.com&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 论坛:www.chenhui530.com", "关于", vbInformation<br/>End Sub</font></p>
<p><font face="Verdana">Private Sub cmdKill_Click()<br/>&nbsp;&nbsp;&nbsp; Dim i As Integer, sum As Integer, checkValue As Integer<br/>&nbsp;&nbsp;&nbsp; '循环LISTVIEW筛选处于选中状态的ITEM<br/>&nbsp;&nbsp;&nbsp; For i = 1 To lvProcessexInfo.ListItems.Count<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; If lvProcessexInfo.ListItems(i).Selected Then<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; sum = sum + 1<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; If UseWmiKillProcess(lvProcessexInfo.ListItems(i).SubItems(1)) Then<br/>'&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Me.lvProcessexInfo.ListItems.Remove i<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; checkValue = checkValue + 1<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; End If<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; End If<br/>&nbsp;&nbsp;&nbsp; Next<br/>&nbsp;&nbsp;&nbsp; '这里不能用VB自带的Msgbox函数，因为VB自带的MSGBOX函数会使程序暂时处于中断状态这样结束了的进程还会显示在LISTVIEW中<br/>&nbsp;&nbsp;&nbsp; '这个检测当选择多个进程时的结果<br/>&nbsp;&nbsp;&nbsp; If checkValue &lt;&gt; 0 Then<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; If checkValue = sum Then<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MessageBox 0, "终止进程成功！！", "提示", vbInformation<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Else<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; If checkValue &gt; 0 Then<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MessageBox 0, "有部分进程终止失败！！", "提示", vbInformation<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Else<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MessageBox 0, "终止进程失败！！", "提示", vbCritical<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; End If<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; End If<br/>&nbsp;&nbsp;&nbsp; Else<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MessageBox 0, "你还没有选择需要结束的进程呢！！", "提示", vbInformation<br/>&nbsp;&nbsp;&nbsp; End If<br/>End Sub</font></p>
<p><font face="Verdana">Private Sub cmdRun_Click()<br/>&nbsp;&nbsp;&nbsp; frmRun.Show<br/>End Sub</font></p>
<p><font face="Verdana">Private Sub Form_Load()<br/>&nbsp;&nbsp;&nbsp; Dim objSWbemServices As SWbemServices, process As SWbemObject, processes As SWbemObjectSet, lvItem As ListItem<br/>&nbsp;&nbsp;&nbsp; Dim processUserName As String, processPath As String, i As Integer, lgWorkingSetSize As Long<br/>&nbsp;&nbsp;&nbsp; '连接WMI服务<br/>&nbsp;&nbsp;&nbsp; If ConnectWmiServer(objSWbemServices, ".") Then<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Me.Show<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; '限制鼠标更改窗体大小<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ControlSize frmMain, False<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; '遍历进程<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Set processes = objSWbemServices.ExecQuery("Select * From Win32_Process")<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; For Each process In processes<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; DoEvents<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; i = i + 1<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; statusMsg.Panels.Item(1).Text = "进程数： " &amp; i<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; '当进程ID为0时表示是系统空闲进程<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; If process.Properties_("ProcessID") = "0" Then<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Set lvItem = Me.lvProcessexInfo.ListItems.Add(, , "系统空闲进程")<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Else<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; '不为0则显示其名字<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Set lvItem = Me.lvProcessexInfo.ListItems.Add(, , process.Properties_("Name"))<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; End If<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; '添加进程ID到LISTVIEW中<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; lvItem.SubItems(1) = process.Properties_("ProcessID")<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; '获取进程用户名称(通过进程中的GetOwner函数)<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; processUserName = IIf(IsNull(process.ExecMethod_("GetOwner").Properties_("User")), "SYSTEM", process.ExecMethod_("GetOwner").Properties_("User"))<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; lgWorkingSetSize = lgWorkingSetSize + (Val(process.Properties_("WorkingSetSize")) / 1024) / 1024<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; '添加进程用户名到LISTVIEW中<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; lvItem.SubItems(2) = processUserName<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; '添加进程使用内存到LISTVIEW中<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; lvItem.SubItems(3) = CStr(Val(process.Properties_("WorkingSetSize")) / 1024) &amp; "K"<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; statusMsg.Panels.Item(2).Text = "内存使用： " &amp; lgWorkingSetSize &amp; "M"<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; '添加进程路径到LISTVIEW中（在这里先判断COMMANDLINE为空吗不为空则先判断PATH如果PATH长于COMMANDLINE就用PATH）<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; If IsNull(process.Properties_("CommandLine")) Then<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; If IsNull(process.Properties_("ExecutablePath")) Then<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; processPath = ""<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Else<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; processPath = process.Properties_("ExecutablePath")<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; End If<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Else<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; If Len(process.Properties_("ExecutablePath")) &gt; Len(process.Properties_("CommandLine")) Then<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; processPath = process.Properties_("ExecutablePath")<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Else<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; processPath = process.Properties_("CommandLine")<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; End If<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; End If<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; processPath = Replace(processPath, """", "")<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; lvItem.SubItems(4) = processPath<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; '要获取图标必须使用路径不能用COMMANDLINE<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; If IsNull(process.Properties_("ExecutablePath")) Then<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; processPath = ""<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Else<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; processPath = process.Properties_("ExecutablePath")<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; End If<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; '排除进程ID为0和4的进程<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; If process.Properties_("ProcessID") &lt;&gt; "0" And process.Properties_("ProcessID") &lt;&gt; "4" Then<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 'IMAGELIST添加KEY因为KEY必须为唯一而且不能为数字所以我在前面加了个H<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; imgProcessList.ListImages.Add , "H" &amp; process.Properties_("ProcessID"), GetIcon(processPath)<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; lvItem.smallIcon = imgProcessList.ListImages.Item("H" &amp; process.Properties_("ProcessID")).Key<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; End If<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Next<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; '开始进程的监视<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; StartMonitorCreateProcessEvent<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; StartMonitorDeleteProcessEvent<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; StartMonitorModificationProcessEvent<br/>&nbsp;&nbsp;&nbsp; Else<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MessageBox 0, "连接不到WMI服务！！", "错误", vbCritical<br/>&nbsp;&nbsp;&nbsp; End If<br/>&nbsp;&nbsp;&nbsp; '释放对象内存<br/>&nbsp;&nbsp;&nbsp; SetObjectNothing objSWbemServices<br/>&nbsp;&nbsp;&nbsp; SetObjectNothing process<br/>&nbsp;&nbsp;&nbsp; SetObjectNothing processes<br/>&nbsp;&nbsp;&nbsp; SetObjectNothing lvItem</font></p>
<p><font face="Verdana">&nbsp;&nbsp;&nbsp; '限制窗体大小<br/>&nbsp;&nbsp;&nbsp; OldWindowProc = GetWindowLong(Me.hwnd, GWL_WNDPROC)<br/>&nbsp;&nbsp;&nbsp; Call SetWindowLong(Me.hwnd, GWL_WNDPROC, AddressOf WndProc)<br/>&nbsp;&nbsp;&nbsp; '恢复鼠标更改窗体大小<br/>&nbsp;&nbsp;&nbsp; ControlSize frmMain, True<br/>End Sub</font></p>
<p><font face="Verdana">Private Function GetWorkingSetSize() As String<br/>&nbsp;&nbsp;&nbsp; Dim i As Integer, lgWorkingSetSize As Long<br/>&nbsp;&nbsp;&nbsp; For i = 1 To Me.lvProcessexInfo.ListItems.Count<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; lgWorkingSetSize = lgWorkingSetSize + Val(Me.lvProcessexInfo.ListItems(i).SubItems(3))<br/>&nbsp;&nbsp;&nbsp; Next<br/>&nbsp;&nbsp;&nbsp; GetWorkingSetSize = CStr(lgWorkingSetSize / 1024) &amp; "M"<br/>End Function</font></p>
<p><font face="Verdana">'释放变量内存方法<br/>Private Sub SetObjectNothing(obj As Object)<br/>&nbsp;&nbsp;&nbsp; Set obj = Nothing<br/>End Sub</font></p>
<p><font face="Verdana">'终止进程函数<br/>Private Function UseWmiKillProcess(ByVal processId As String) As Boolean<br/>&nbsp;&nbsp;&nbsp; Dim objSWbemServices As SWbemServices, process As SWbemObject, processes As SWbemObjectSet, intReturn As Integer<br/>&nbsp;&nbsp;&nbsp; '连接WMI服务<br/>&nbsp;&nbsp;&nbsp; If ConnectWmiServer(objSWbemServices, ".") Then<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Set processes = objSWbemServices.ExecQuery("Select * From Win32_Process Where ProcessID=" &amp; processId)<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; For Each process In processes<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; '调用Terminate方法结束进程<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; intReturn = process.Terminate<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; If intReturn = 0 Then<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; UseWmiKillProcess = True<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Else<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; UseWmiKillProcess = False<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; End If<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Next<br/>&nbsp;&nbsp;&nbsp; Else<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MessageBox 0, "连接不到WMI服务！！", "错误", vbCritical<br/>&nbsp;&nbsp;&nbsp; End If<br/>End Function</font></p>
<p><font face="Verdana">'连接WMI服务函数(此函数也可以连接远程计算机，当要连接远程计算机时把参数“strComputerName”指示为IP地址即可但是注意的是还要提供用户名和密码)<br/>Private Function ConnectWmiServer(objSWbemServices As SWbemServices, ByVal strComputerName As String, Optional ByVal strNameSpace As String = "root/cimv2", Optional ByVal strUserName As String = "", Optional ByVal strPassWord As String = "") As Boolean<br/>&nbsp;&nbsp;&nbsp; Dim objSWbemLocator As SWbemLocator<br/>&nbsp;&nbsp;&nbsp; On Error GoTo errLine<br/>&nbsp;&nbsp;&nbsp; Set objSWbemLocator = CreateObject("WbemScripting.SWbemLocator")<br/>&nbsp;&nbsp;&nbsp; '提升权限为DEBUG权限<br/>&nbsp;&nbsp;&nbsp; objSWbemLocator.Security_.Privileges.Add wbemPrivilegeDebug<br/>&nbsp;&nbsp;&nbsp; If strComputerName &lt;&gt; "." Then<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Set objSWbemServices = objSWbemLocator.ConnectServer(strComputerName, strNameSpace, strUserName, strPassWord)<br/>&nbsp;&nbsp;&nbsp; Else<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Set objSWbemServices = objSWbemLocator.ConnectServer()<br/>&nbsp;&nbsp;&nbsp; End If<br/>&nbsp;&nbsp;&nbsp; ConnectWmiServer = True<br/>&nbsp;&nbsp;&nbsp; Set objSWbemLocator = Nothing<br/>&nbsp;&nbsp;&nbsp; Exit Function<br/>errLine:<br/>&nbsp;&nbsp;&nbsp; ConnectWmiServer = False<br/>&nbsp;&nbsp;&nbsp; Set objSWbemLocator = Nothing<br/>End Function</font></p>
<p><font face="Verdana">'利用WMI创建进程<br/>Public Function UseWmiCreateProcess(ByVal strFile As String) As Long<br/>&nbsp;&nbsp;&nbsp; Dim objSWbemServices As SWbemServices, objSWbemObject As SWbemObject, processId As Long, errResult As Long<br/>&nbsp;&nbsp;&nbsp; '连接WMI服务<br/>&nbsp;&nbsp;&nbsp; If ConnectWmiServer(objSWbemServices, ".") Then<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; '获取一个WMI实例<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Set objSWbemObject = objSWbemServices.Get("Win32_Process")<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; '调用CREATE方法创建一进程<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; errResult = objSWbemObject.Create(strFile, Null, Null, processId)<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; '当成功则返回其PID<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; If errResult &lt;&gt; 0 Then<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; UseWmiCreateProcess = 0<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Else<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; UseWmiCreateProcess = processId<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; End If<br/>&nbsp;&nbsp;&nbsp; Else<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MessageBox 0, "连接不到WMI服务！！", "错误", vbCritical<br/>&nbsp;&nbsp;&nbsp; End If<br/>&nbsp;&nbsp;&nbsp; '释放内存<br/>&nbsp;&nbsp;&nbsp; SetObjectNothing objSWbemServices<br/>&nbsp;&nbsp;&nbsp; SetObjectNothing objSWbemObject<br/>End Function</font></p>
<p><font face="Verdana">Private Sub StartMonitorCreateProcessEvent()<br/>&nbsp;&nbsp;&nbsp; '执行进程创建事件<br/>&nbsp;&nbsp;&nbsp; Dim objSWbemServices As SWbemServices<br/>&nbsp;&nbsp;&nbsp; If ConnectWmiServer(objSWbemServices, ".") Then<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Set CreateProcessEvent = New SWbemSink<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 'Set objSWbemServices = GetObject("winmgmts:\\.\root\cimv2")<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; objSWbemServices.ExecNotificationQueryAsync CreateProcessEvent, "SELECT * FROM __InstanceCreationEvent WITHIN 1 WHERE TargetInstance ISA 'Win32_Process'"<br/>&nbsp;&nbsp;&nbsp; Else<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MessageBox 0, "连接不到WMI服务！！", "错误", vbCritical<br/>&nbsp;&nbsp;&nbsp; End If<br/>&nbsp;&nbsp;&nbsp; SetObjectNothing objSWbemServices<br/>End Sub</font></p>
<p><font face="Verdana">Private Sub StartMonitorDeleteProcessEvent()<br/>&nbsp;&nbsp;&nbsp; '执行进程结束事件<br/>&nbsp;&nbsp;&nbsp; Dim objSWbemServices As SWbemServices<br/>&nbsp;&nbsp;&nbsp; If ConnectWmiServer(objSWbemServices, ".") Then<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Set DeleteProcessEvent = New SWbemSink<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 'Set objSWbemServices = GetObject("winmgmts:\\.\root\cimv2")<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; objSWbemServices.ExecNotificationQueryAsync DeleteProcessEvent, "SELECT * FROM __InstanceDeletionEvent WITHIN 1 WHERE TargetInstance ISA 'Win32_Process'"<br/>&nbsp;&nbsp;&nbsp; Else<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MessageBox 0, "连接不到WMI服务！！", "错误", vbCritical<br/>&nbsp;&nbsp;&nbsp; End If<br/>&nbsp;&nbsp;&nbsp; SetObjectNothing objSWbemServices<br/>End Sub</font></p>
<p><font face="Verdana">Private Sub StartMonitorModificationProcessEvent()<br/>&nbsp;&nbsp;&nbsp; '执行进程属性变更事件<br/>&nbsp;&nbsp;&nbsp; Dim objSWbemServices As SWbemServices<br/>&nbsp;&nbsp;&nbsp; If ConnectWmiServer(objSWbemServices, ".") Then<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Set ModificationProcessEvent = New SWbemSink<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 'Set objSWbemServices = GetObject("winmgmts:\\.\root\cimv2")<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; objSWbemServices.ExecNotificationQueryAsync ModificationProcessEvent, "SELECT * FROM __InstanceModificationEvent WITHIN 5 WHERE TargetInstance ISA 'Win32_Process'"<br/>&nbsp;&nbsp;&nbsp; Else<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MessageBox 0, "连接不到WMI服务！！", "错误", vbCritical<br/>&nbsp;&nbsp;&nbsp; End If<br/>&nbsp;&nbsp;&nbsp; SetObjectNothing objSWbemServices<br/>End Sub</font></p>
<p><font face="Verdana">'进程创建事件<br/>Private Sub CreateProcessEvent_OnObjectReady(ByVal objWbemObject As WbemScripting.ISWbemObject, ByVal objWbemAsyncContext As WbemScripting.ISWbemNamedValueSet)<br/>&nbsp;&nbsp;&nbsp; '当有进程创建了则添加信息到LISTVIEW中<br/>&nbsp;&nbsp;&nbsp; Dim lvItem As ListItem, lgWorkingSetSize As Long<br/>&nbsp;&nbsp;&nbsp; Dim processUserName As String, processPath As String<br/>&nbsp;&nbsp;&nbsp; '添加进程名到LISTVIEW中<br/>&nbsp;&nbsp;&nbsp; Set lvItem = Me.lvProcessexInfo.ListItems.Add(, , objWbemObject.Properties_.Item("TargetInstance").Value.Properties_.Item("Name").Value)<br/>&nbsp;&nbsp;&nbsp; '添加进程PID到LISTVIEW中<br/>&nbsp;&nbsp;&nbsp; lvItem.SubItems(1) = objWbemObject.Properties_.Item("TargetInstance").Value.Properties_.Item("ProcessID").Value<br/>&nbsp;&nbsp;&nbsp; '添加进程用户名到LISTVIEW中<br/>&nbsp;&nbsp;&nbsp; processUserName = GetProcessUserNameByProcessID(objWbemObject.Properties_.Item("TargetInstance").Value.Properties_.Item("ProcessID").Value)<br/>&nbsp;&nbsp;&nbsp; lvItem.SubItems(2) = processUserName<br/>&nbsp;&nbsp;&nbsp; '添加进程使用的内存到LISTVIEW中<br/>&nbsp;&nbsp;&nbsp; lvItem.SubItems(3) = CStr(CLng(objWbemObject.Properties_.Item("TargetInstance").Value.Properties_.Item("WorkingSetSize").Value) \ 1024) &amp; "K"<br/>&nbsp;&nbsp;&nbsp; '添加进程路径到LISTVIEW中<br/>&nbsp;&nbsp;&nbsp; If IsNull(objWbemObject.Properties_.Item("TargetInstance").Value.Properties_.Item("CommandLine")) Then<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; If IsNull(objWbemObject.Properties_.Item("TargetInstance").Value.Properties_.Item("ExecutablePath")) Then<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; processPath = ""<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Else<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; processPath = objWbemObject.Properties_.Item("TargetInstance").Value.Properties_.Item("ExecutablePath")<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; End If<br/>&nbsp;&nbsp;&nbsp; Else<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; If Len(objWbemObject.Properties_.Item("TargetInstance").Value.Properties_.Item("ExecutablePath")) &gt; Len(objWbemObject.Properties_.Item("TargetInstance").Value.Properties_.Item("CommandLine")) Then<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; processPath = objWbemObject.Properties_.Item("TargetInstance").Value.Properties_.Item("ExecutablePath")<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Else<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; processPath = objWbemObject.Properties_.Item("TargetInstance").Value.Properties_.Item("CommandLine")<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; End If<br/>&nbsp;&nbsp;&nbsp; End If<br/>&nbsp;&nbsp;&nbsp; lvItem.SubItems(4) = Replace(processPath, """", "")<br/>&nbsp;&nbsp;&nbsp; processPath = objWbemObject.Properties_.Item("TargetInstance").Value.Properties_.Item("ExecutablePath").Value<br/>&nbsp;&nbsp;&nbsp; imgProcessList.ListImages.Add , "H" &amp; objWbemObject.Properties_.Item("TargetInstance").Value.Properties_.Item("ProcessID").Value, GetIcon(processPath)<br/>&nbsp;&nbsp;&nbsp; lvItem.smallIcon = imgProcessList.ListImages.Item("H" &amp; objWbemObject.Properties_.Item("TargetInstance").Value.Properties_.Item("ProcessID").Value).Key<br/>&nbsp;&nbsp;&nbsp; lgWorkingSetSize = (Val(objWbemObject.Properties_.Item("TargetInstance").Value.Properties_.Item("WorkingSetSize").Value) / 1024) / 1024<br/>&nbsp;&nbsp;&nbsp; statusMsg.Panels.Item(1).Text = "进程数： " &amp; CStr(Mid(statusMsg.Panels.Item(1).Text, 5, Len(statusMsg.Panels.Item(1).Text) - 4) + 1)<br/>&nbsp;&nbsp;&nbsp; statusMsg.Panels.Item(2).Text = "内存使用： " &amp; Mid(statusMsg.Panels.Item(2).Text, 6, Len(statusMsg.Panels.Item(2).Text) - 6) + lgWorkingSetSize &amp; "M"<br/>&nbsp;&nbsp;&nbsp; SetObjectNothing lvItem<br/>End Sub</font></p>
<p><font face="Verdana">'获取进程用户名函数<br/>Private Function GetProcessUserNameByProcessID(ByVal processId As String) As String<br/>&nbsp;&nbsp;&nbsp; Dim objSWbemServices As SWbemServices, objWbemObjectSet As SWbemObjectSet, objWbemObject As SWbemObject<br/>&nbsp;&nbsp;&nbsp; '连接WMI服务<br/>&nbsp;&nbsp;&nbsp; If ConnectWmiServer(objSWbemServices, ".") Then<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Set objWbemObjectSet = objSWbemServices.ExecQuery("Select * From Win32_Process Where ProcessID=" &amp; processId)<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; For Each objWbemObject In objWbemObjectSet<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; '获取进程用户名称(通过进程中的GetOwner函数<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; GetProcessUserNameByProcessID = objWbemObject.ExecMethod_("GetOwner").Properties_("User")<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Next<br/>&nbsp;&nbsp;&nbsp; Else<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MessageBox 0, "连接不到WMI服务！！", "错误", vbCritical<br/>&nbsp;&nbsp;&nbsp; End If<br/>&nbsp;&nbsp;&nbsp; '释放内存<br/>&nbsp;&nbsp;&nbsp; SetObjectNothing objSWbemServices<br/>&nbsp;&nbsp;&nbsp; SetObjectNothing objWbemObjectSet<br/>&nbsp;&nbsp;&nbsp; SetObjectNothing objWbemObject<br/>End Function</font></p>
<p><font face="Verdana">'进程退出事件<br/>Private Sub DeleteProcessEvent_OnObjectReady(ByVal objWbemObject As WbemScripting.ISWbemObject, ByVal objWbemAsyncContext As WbemScripting.ISWbemNamedValueSet)<br/>&nbsp;&nbsp;&nbsp; '当有进程结束了则查找LISTVIEW对应项并且删除它<br/>&nbsp;&nbsp;&nbsp; Dim lvItem As ListItem, lgWorkingSetSize As Long<br/>&nbsp;&nbsp;&nbsp; Set lvItem = Me.lvProcessexInfo.FindItem(objWbemObject.Properties_.Item("TargetInstance").Value.Properties_.Item("ProcessID"), lvwSubItem, , lvwPartial)<br/>&nbsp;&nbsp;&nbsp; Me.lvProcessexInfo.ListItems.Remove lvItem.Index<br/>&nbsp;&nbsp;&nbsp; '更新进程数<br/>&nbsp;&nbsp;&nbsp; statusMsg.Panels.Item(1).Text = "进程数： " &amp; CStr(Mid(statusMsg.Panels.Item(1).Text, 5, Len(statusMsg.Panels.Item(1).Text) - 4) - 1)<br/>&nbsp;&nbsp;&nbsp; '更新内存使用率<br/>&nbsp;&nbsp;&nbsp; lgWorkingSetSize = (Val(objWbemObject.Properties_.Item("TargetInstance").Value.Properties_.Item("WorkingSetSize").Value) / 1024) / 1024<br/>&nbsp;&nbsp;&nbsp; statusMsg.Panels.Item(2).Text = "内存使用： " &amp; Mid(statusMsg.Panels.Item(2).Text, 6, Len(statusMsg.Panels.Item(2).Text) - 6) - lgWorkingSetSize &amp; "M"<br/>&nbsp;&nbsp;&nbsp; SetObjectNothing lvItem<br/>End Sub</font></p>
<p><font face="Verdana">Private Sub Form_Resize()<br/>&nbsp;&nbsp;&nbsp; On Error Resume Next<br/>&nbsp;&nbsp;&nbsp; Me.lvProcessexInfo.Width = Me.Width - 340<br/>&nbsp;&nbsp;&nbsp; Me.lvProcessexInfo.Height = Me.Height - 1760<br/>&nbsp;&nbsp;&nbsp; Me.cmdAbout.Top = Me.lvProcessexInfo.Height + 500<br/>&nbsp;&nbsp;&nbsp; Me.cmdExit.Top = Me.cmdAbout.Top<br/>&nbsp;&nbsp;&nbsp; Me.cmdKill.Top = Me.cmdAbout.Top<br/>&nbsp;&nbsp;&nbsp; Me.cmdRun.Top = Me.cmdAbout.Top<br/>&nbsp;&nbsp;&nbsp; Me.cmdExit.Left = Me.Width - 220 - Me.cmdExit.Width<br/>&nbsp;&nbsp;&nbsp; Me.cmdRun.Left = Me.cmdExit.Left - Me.cmdExit.Width - 140<br/>&nbsp;&nbsp;&nbsp; Me.cmdKill.Left = Me.cmdRun.Left - Me.cmdRun.Width - 140<br/>&nbsp;&nbsp;&nbsp; Me.cmdAbout.Left = Me.cmdKill.Left - Me.cmdKill.Width - 140<br/>End Sub</font></p>
<p><font face="Verdana">Private Sub Form_Unload(Cancel As Integer)<br/>&nbsp;&nbsp;&nbsp; Dim i As Integer<br/>&nbsp;&nbsp;&nbsp; Call SetWindowLong(Me.hwnd, GWL_WNDPROC, OldWindowProc)<br/>&nbsp;&nbsp;&nbsp; For i = Forms.Count - 1 To 1 Step -1<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Unload Forms(i)<br/>&nbsp;&nbsp;&nbsp; Next<br/>&nbsp;&nbsp;&nbsp; End<br/>End Sub</font></p>
<p><font face="Verdana">'进程属性变更事件<br/>Private Sub ModificationProcessEvent_OnObjectReady(ByVal objWbemObject As WbemScripting.ISWbemObject, ByVal objWbemAsyncContext As WbemScripting.ISWbemNamedValueSet)<br/>&nbsp;&nbsp;&nbsp; '主要是监视内存的变化<br/>&nbsp;&nbsp;&nbsp; On Error Resume Next<br/>&nbsp;&nbsp;&nbsp; Dim lvItem As ListItem, lgWorkingSetSize As Long<br/>&nbsp;&nbsp;&nbsp; Set lvItem = Me.lvProcessexInfo.FindItem(objWbemObject.Properties_.Item("TargetInstance").Value.Properties_.Item("ProcessID"), lvwSubItem, , lvwPartial)<br/>&nbsp;&nbsp;&nbsp; '算出实时内存使用情况（也可以用GetWorkingSetSize函数，但是这个显得科学些）<br/>&nbsp;&nbsp;&nbsp; lgWorkingSetSize = Left(lvItem.SubItems(3), Len(lvItem.SubItems(3)) - 1)<br/>&nbsp;&nbsp;&nbsp; lgWorkingSetSize = CInt((objWbemObject.Properties_.Item("TargetInstance").Value.Properties_.Item("WorkingSetSize").Value / 1024 - lgWorkingSetSize) / 1024)<br/>&nbsp;&nbsp;&nbsp; lvItem.SubItems(3) = CStr(Val(objWbemObject.Properties_.Item("TargetInstance").Value.Properties_.Item("WorkingSetSize").Value) / 1024) &amp; "K"<br/>&nbsp;&nbsp;&nbsp; statusMsg.Panels.Item(2).Text = "内存使用： " &amp; Mid(statusMsg.Panels.Item(2).Text, 6, Len(statusMsg.Panels.Item(2).Text) - 6) + lgWorkingSetSize &amp; "M"<br/>&nbsp;&nbsp;&nbsp; SetObjectNothing lvItem<br/>End Sub</font></p></div>本帖来源:<font face="Verdana">http://www.superkill.cn/bbs/dispbbs.asp?boardid=2&amp;Id=6</font></div></td></tr></tbody></table>