查找/列出进程很容易,但干掉进程得借助系统命令ntsd.exe,详细用法见下面的代码 :
using
System;
using System.Diagnostics;
using System.Windows.Forms;
namespace ProcessDemo
{
public partial class Form1 : Form
{
public Form1()
{
InitializeComponent();
}
private void Form1_Load( object sender, EventArgs e)
{
this .linkLabel1.Links.Add( 0 , linkLabel1.Text.Length, " http://yjmyzz.cnblogs.com/ " );
}
private void linkLabel1_LinkClicked( object sender, LinkLabelLinkClickedEventArgs e)
{
this .linkLabel1.Links[linkLabel1.Links.IndexOf(e.Link)].Visited = true ;
string target = e.Link.LinkData as string ;
if (target != null && target.StartsWith( " http:// " ))
{
Process.Start(target);
}
}
/// <summary>
/// 列出所有可访问进程
/// </summary>
/// <param name="sender"></param>
/// <param name="e"></param>
private void btnList_Click( object sender, EventArgs e)
{
Process[] processes;
processes = Process.GetProcesses();
string str = "" ;
foreach (Process p in processes)
{
try
{
str = p.ProcessName;
this .lst1.Items.Add( " 名称: " + p.ProcessName + " ,启动时间: " + p.StartTime.ToShortTimeString() + " ,进程ID: " + p.Id.ToString() );
}
catch (Exception ex)
{
this .lst1.Items.Add(ex.Message.ToString()); // 某些系统进程禁止访问,所以要加异常处理
}
}
}
private void btnFind_Click( object sender, EventArgs e)
{
txtFind.Text = txtFind.Text.Trim().ToLower();
if (txtFind.Text.Length > 0 )
{
Process[] arrP = Process.GetProcesses();
foreach (Process p in arrP)
{
try
{
if (p.ProcessName.ToLower() == txtFind.Text)
{
MessageBox.Show(txtFind.Text + " 找到了,PID为 " + p.Id.ToString());
return ;
}
}
catch { }
}
MessageBox.Show( " 未找到该进程,请检查输入! " );
}
}
private void btnKill_Click( object sender, EventArgs e)
{
txtFind.Text = txtFind.Text.Trim().ToLower();
int pid = - 1 ;
if (txtFind.Text.Length > 0 )
{
Process[] arrP = Process.GetProcesses();
foreach (Process p in arrP)
{
try
{
if (p.ProcessName.ToLower() == txtFind.Text)
{
pid = p.Id;
break ;
}
}
catch { }
}
if (pid != - 1 )
{
RunCmd( " ntsd -c q -p " + pid);
}
}
}
/// <summary>
/// 运行DOS命令
/// DOS关闭进程命令(ntsd -c q -p PID )PID为进程的ID
/// </summary>
/// <param name="command"></param>
/// <returns></returns>
public string RunCmd( string command)
{
Process p = new Process();
p.StartInfo.FileName = " cmd.exe " ;
p.StartInfo.Arguments = " /c " + command;
p.StartInfo.UseShellExecute = false ;
p.StartInfo.RedirectStandardInput = true ;
p.StartInfo.RedirectStandardOutput = true ;
p.StartInfo.RedirectStandardError = true ;
p.StartInfo.CreateNoWindow = true ;
p.Start();
return p.StandardOutput.ReadToEnd();
}
}
}
using System.Diagnostics;
using System.Windows.Forms;
namespace ProcessDemo
{
public partial class Form1 : Form
{
public Form1()
{
InitializeComponent();
}
private void Form1_Load( object sender, EventArgs e)
{
this .linkLabel1.Links.Add( 0 , linkLabel1.Text.Length, " http://yjmyzz.cnblogs.com/ " );
}
private void linkLabel1_LinkClicked( object sender, LinkLabelLinkClickedEventArgs e)
{
this .linkLabel1.Links[linkLabel1.Links.IndexOf(e.Link)].Visited = true ;
string target = e.Link.LinkData as string ;
if (target != null && target.StartsWith( " http:// " ))
{
Process.Start(target);
}
}
/// <summary>
/// 列出所有可访问进程
/// </summary>
/// <param name="sender"></param>
/// <param name="e"></param>
private void btnList_Click( object sender, EventArgs e)
{
Process[] processes;
processes = Process.GetProcesses();
string str = "" ;
foreach (Process p in processes)
{
try
{
str = p.ProcessName;
this .lst1.Items.Add( " 名称: " + p.ProcessName + " ,启动时间: " + p.StartTime.ToShortTimeString() + " ,进程ID: " + p.Id.ToString() );
}
catch (Exception ex)
{
this .lst1.Items.Add(ex.Message.ToString()); // 某些系统进程禁止访问,所以要加异常处理
}
}
}
private void btnFind_Click( object sender, EventArgs e)
{
txtFind.Text = txtFind.Text.Trim().ToLower();
if (txtFind.Text.Length > 0 )
{
Process[] arrP = Process.GetProcesses();
foreach (Process p in arrP)
{
try
{
if (p.ProcessName.ToLower() == txtFind.Text)
{
MessageBox.Show(txtFind.Text + " 找到了,PID为 " + p.Id.ToString());
return ;
}
}
catch { }
}
MessageBox.Show( " 未找到该进程,请检查输入! " );
}
}
private void btnKill_Click( object sender, EventArgs e)
{
txtFind.Text = txtFind.Text.Trim().ToLower();
int pid = - 1 ;
if (txtFind.Text.Length > 0 )
{
Process[] arrP = Process.GetProcesses();
foreach (Process p in arrP)
{
try
{
if (p.ProcessName.ToLower() == txtFind.Text)
{
pid = p.Id;
break ;
}
}
catch { }
}
if (pid != - 1 )
{
RunCmd( " ntsd -c q -p " + pid);
}
}
}
/// <summary>
/// 运行DOS命令
/// DOS关闭进程命令(ntsd -c q -p PID )PID为进程的ID
/// </summary>
/// <param name="command"></param>
/// <returns></returns>
public string RunCmd( string command)
{
Process p = new Process();
p.StartInfo.FileName = " cmd.exe " ;
p.StartInfo.Arguments = " /c " + command;
p.StartInfo.UseShellExecute = false ;
p.StartInfo.RedirectStandardInput = true ;
p.StartInfo.RedirectStandardOutput = true ;
p.StartInfo.RedirectStandardError = true ;
p.StartInfo.CreateNoWindow = true ;
p.Start();
return p.StandardOutput.ReadToEnd();
}
}
}
另外ntsd.exe在windows vista以上的版本(包括windows 2008)上,出于安全考虑已经被MS给去掉了,但我们可以直接从xp下复制过来继续使用,这里为方便大家给出ntsd.exe的下载
http://files.cnblogs.com/yjmyzz/ntsd.rar