delphi 对抗任务管理器关闭（提升进程到Debug模式，然后设置进程信息SE_PROC_INFO）

[delphi] view plain copy

1. program Project1;
2. uses
3. Windows;
4. {$R *.res}
5. function MakeMeCritical(Yes: Boolean): Boolean;
6. const
7. SE_DEBUG_PRIVILEGE = $14;
8. SE_PROC_INFO = $1D;
9. var
10. Enabled: PBOOL;
11. DllHandle: THandle;
12. BreakOnTermination: ULong;
13. HR: HRESULT;
14. RtlAdjustPrivilege: function(Privilege: ULONG; Enable: BOOL; CurrentThread: BOOL; var Enabled: PBOOL): DWORD; stdcall;
15. NtSetInformationProcess: function(ProcHandle: THandle; ProcInfoClass: ULONG; ProcInfo: Pointer;  ProcInfoLength: ULONG): HResult; stdcall;
16. begin
17. Result := False;
18. DllHandle := LoadLibrary('ntdll.dll') ;
19. if DllHandle <> 0 then
20. begin
21. @RtlAdjustPrivilege := GetProcAddress(dllHandle, 'RtlAdjustPrivilege');
22. if (@RtlAdjustPrivilege <> nil) then
23. begin
24. if RtlAdjustPrivilege(SE_DEBUG_PRIVILEGE, True, True, Enabled) = 0 then
25. begin
26. @NtSetInformationProcess := GetProcAddress(dllHandle, 'NtSetInformationProcess');
27. if (@NtSetInformationProcess <> nil) then
28. begin
29. BreakOnTermination := Ord(Yes);
30. HR := NtSetInformationProcess(GetCurrentProcess(), SE_PROC_INFO, @BreakOnTermination, SizeOf(BreakOnTermination));
31. Result := HR = S_OK;
32. end;
33. end;
34. end;
35. FreeLibrary(DllHandle);
36. end
37. end;
38. begin
39. if MakeMeCritical(True) then
40. begin
41. //the user cannot termintate the process now
42. MessageBoxA(0, PAnsiChar('你TMD在任务管理器关闭我看看！'), PAnsiChar('不要关闭此窗口'), 0);
43. MakeMeCritical(False)
44. end
45. else
46. MessageBoxA(0, PAnsiChar('噢，NO!'), PAnsiChar('Test'), 0);
47. end.

http://blog.csdn.net/earbao/article/details/22156573