Windows下殺進程22種方法：
'1.結束進程 (參數：進程ID)
Sub KillProcess(ByVal dwProcessId As Long)
SetDebug '提權
Dim hProcess As Long
'方法1，使用普通API
hProcess = OpenProcess(PROCESS_TERMINATE,False, dwProcessId)
If hProcess <> 0 Then
TerminateProcess hProcess, 0&
CloseHandle hProcess
End If
'方法2，使用內核API
Dimoa As OBJECT_ATTRIBUTES
Dimcid As CLIENT_ID
Dim ntStatus AsLong
oa.Length = Len(oa)
cid.UniqueProcess = dwProcessId
ntStatus = ZwOpenProcess(hProcess,PROCESS_TERMINATE, oa, cid)
If ntStatus >= 0 Then
ZwTerminateProcess hProcess, 0&
ZwClose hProcess
End If
'方法3
'dwProcessId = dwProcessId + 1
End Sub
'2.結束線程 (參數：線程ID)
SubKillThread(ByVal dwThreadId As Long)
SetDebug '提權
Dim hThread As Long
'方法1，使用普通API
hThread =OpenThread(THREAD_TERMINATE, False, dwThreadId)
If hThread <> 0 Then
TerminateThread hThread, 0&
CloseHandle hThread
End If
'方法2，使用內核API
Dimoa As OBJECT_ATTRIBUTES
Dimcid As CLIENT_ID
Dim ntStatus AsLong
oa.Length = Len(oa)
cid.UniqueThread = dwThreadId
ntStatus = ZwOpenThread(hThread,THREAD_TERMINATE, oa, cid)
If ntStatus >= 0 Then
ZwTerminateThread hThread, 0&
ZwClose hThread
End If
End Sub
'3.結束作業對象 (參數：進程ID)
PublicFunction KillJob(ByVal dwProcessId As Long) As Boolean
Dim hProcess AsLong
DimhJob As Long
Dim ntStatus AsLong
Dimoa As OBJECT_ATTRIBUTES
oa.Length = Len(oa)
ntStatus = ZwCreateJobObject(ByValVarPtr(hJob), JOB_OBJECT_ALL_ACCESS, oa)
If ntStatus >= 0 Then
hProcess = OpenProcess(PROCESS_ALL_ACCESS, False, dwProcessId)
If hProcess <> 0 Then
ntStatus = ZwAssignProcessToJobObject(hJob, hProcess)
If (ntStatus >= 0) Then
KillJob = ZwTerminateJobObject(hJob, 0&) >= 0
End If
ZwClose hProcess
End If
ZwClose hJob
End If
End Function
'4.注入退出進程
PublicFunction MyExitProcess(ByVal dwProcessId As Long) As Boolean
Dim hProcess As Long, hThread AsLong, lngRet As Long, pThread As Long
hProcess = OpenProcess(PROCESS_ALL_ACCESS,False, dwProcessId)
If hProcess <> 0 Then
pThread = GetProcAddress(GetModuleHandleA("kernel32"),"ExitProcess")
hThread = CreateRemoteThread(hProcess, ByVal 0&, 0&, ByVal pThread,ByVal 0&, 0, 0&)
If hThread <> 0 Then
WaitForSingleObject hThread, INFINITE
GetExitCodeThread hThread, lngRet
MyExitProcess = lngRet
ZwClose hThread
End If
ZwClose hProcess
End If
End Function
'5.破壞進程內存
SubClearProcessMemory(ByVal dwProcessId As Long)
hProcess =OpenProcess(PROCESS_ALL_ACCESS, False, dwProcessId)
If hProcess Then
Dim i As Long
Dim dwWritten As Long
Dim bytArray() As Byte
ReDim bytArray(0 To 4095)
For i = &H10000 To &H7FFFFFFF - &H10000 Step &H1000
Call WriteProcessMemory(hProcess, ByVal i, VarPtr(bytArray(0)), &H1000,dwWritten)
Next
Erase bytArray
ZwClose hProcess
End If
End Sub
'6.結束任務 (參數：窗口句柄)
SubKillTask(ByVal m_hWnd As Long)
EndTask m_hWnd, False, True
End Sub
'7.停止服務 (參數：服務名稱)
PublicFunction StopSvc(strServiceName As String) As Boolean
Dim scHandle AsLong
Dim svcHandle As Long
scHandle =OpenSCManager(vbNullString, vbNullString, SC_MANAGER_ENUMERATE_SERVICE)
svcHandle = OpenService(scHandle,strServiceName, SERVICE_WIN32_SHARE_PROCESS)
StopSvc = ControlService(svcHandle,SERVICE_CONTROL_STOP, 0&)
CloseServiceHandle (svcHandle)
CloseServiceHandle (scHandle)
End Function
'8.WM_CLOSE 關閉窗口 (參數：窗口句柄)
SubCloseWnd(ByVal m_hWnd As Long)
PostMessage m_hWnd, WM_CLOSE, 0, 0
End Sub
'9.WM_SYSCOMMAND (發送系統菜單命令)
SubCloseWnd_SysCommand(ByVal m_hWnd As Long)
PostMessage m_hWnd, WM_SYSCOMMAND,SC_CLOSE, 0
End Sub
'10.WM_NCLBUTTONDBLCLK (點擊系統菜單)
SubCloseWnd_NCLDBK(ByVal m_hWnd As Long)
PostMessage m_hWnd,WM_NCLBUTTONDBLCLK, HTSYSMENU, 0
End Sub
'11.發送Alt+F4
SubSendAltF4(ByVal m_hWnd As Long)
SetForegroundWindow m_hWnd
DoEvents
PostMessage m_hWnd, WM_SYSKEYDOWN,vbKeyF4, &H203E0001
PostMessage m_hWnd, WM_SYSKEYUP,vbKeyF4, &H203E0001
End Sub
'12.模擬Alt+F4，對隱藏窗口也有效
SubKeyPressAltF4(ByVal m_hWnd As Long)
SetForegroundWindow m_hWnd
DoEvents
'方法一
keybd_event vbKeyMenu, 0, 0, 0
keybd_event vbKeyF4, 0, 0, 0
keybd_event vbKeyF4, 0,KEYEVENTF_KEYUP, 0
keybd_event vbKeyMenu, 0,KEYEVENTF_KEYUP, 0
'方法二
m_SendInputAltF4
End Sub
'13.模擬Alt+空格+C
SubKeyPressAltSpaceC(ByVal m_hWnd As Long)
SetForegroundWindow m_hWnd
DoEvents
keybd_event vbKeyMenu, 0, 0, 0
keybd_event vbKeySpace, 0, 0, 0
keybd_event vbKeySpace, 0,KEYEVENTF_KEYUP, 0
keybd_event vbKeyMenu, 0,KEYEVENTF_KEYUP, 0
keybd_event vbKeyC, 0, 0, 0
keybd_event vbKeyC, 0,KEYEVENTF_KEYUP, 0
End Sub
'14.模擬單擊關閉按鈕/雙擊系統菜單
SubMouseClickClose(ByVal m_hWnd As Long)
DimlStyle As Long
Dim CXBorder AsLong
Dim CYBorder AsLong
Dim CYCaption As Long
Dimx As Long
Dimy As Long
DimptOld As POINTAPI
DimlRect As RECT
Dim RTLStyle AsBoolean
'計算標準窗口非客戶區邊框
lStyle = GetWindowLong(m_hWnd,GWL_STYLE)
If lStyle And WS_THICKFRAME Then
CXBorder = GetSystemMetrics(SM_CXFRAME) \ 2
CYBorder = GetSystemMetrics(SM_CYFRAME) \ 2
Else
CXBorder = GetSystemMetrics(SM_CXDLGFRAME)
CYBorder = GetSystemMetrics(SM_CYDLGFRAME)
End If
CYCaption = GetSystemMetrics(SM_CYCAPTION)'標題欄高度
lStyle = lStyle And Not WS_DISABLEDOr WS_SYSMENU Or WS_CAPTION '使之有效且擁有系統菜單
Call SetWindowLong(m_hWnd,GWL_STYLE, lStyle)
Call SetWindowPos(m_hWnd,HWND_TOPMOST, 0, 0, 0, 0, SWP_NOMOVE Or SWP_NOSIZE Or SWP_SHOWWINDOW) '設爲頂層且可視
Call GetWindowRect(m_hWnd, lRect)
lStyle = GetWindowLong(m_hWnd,GWL_EXSTYLE)
RTLStyle = lStyle AndWS_EX_LAYOUTRTL '是否是鏡子窗口
'****************** 方法一 單擊關閉 ********************
If Not RTLStyle Then
x = lRect.Right - (CXBorder + CYCaption \ 2)
y = lRect.Top + (CYBorder + CYCaption \ 2)
Else
x = lRect.Left + (CXBorder + CYCaption \ 2)
y = lRect.Top + (CYBorder + CYCaption \ 2)
End If
Call GetCursorPos(ptOld) '原座標
Call SetCursorPos(x, y)
'方法(1)keybd_event
Callmouse_event(MOUSEEVENTF_LEFTDOWN, 0, 0, 0, 0)
Call mouse_event(MOUSEEVENTF_LEFTUP,0, 0, 0, 0)
'方法(2)SendInput
m_MouseClick
Call SetCursorPos(ptOld.x,ptOld.y) '恢復座標
'****************** 方法二 雙擊系統菜單 ******************
If RTLStyle Then
x = lRect.Right - (CXBorder + CYCaption \ 2)
y = lRect.Top + (CYBorder + CYCaption \ 2)
Else
x = lRect.Left + (CXBorder + CYCaption \ 2)
y = lRect.Top + (CYBorder + CYCaption \ 2)
End If
Call GetCursorPos(ptOld) '原座標
Call SetCursorPos(x, y)
'方法(1)keybd_event
Callmouse_event(MOUSEEVENTF_LEFTDOWN, 0, 0, 0, 0)
Call mouse_event(MOUSEEVENTF_LEFTUP,0, 0, 0, 0)
Callmouse_event(MOUSEEVENTF_LEFTDOWN, 0, 0, 0, 0)
Call mouse_event(MOUSEEVENTF_LEFTUP,0, 0, 0, 0)
'方法(2)SendInput
Call m_MouseClick
Call m_MouseClick
Call SetCursorPos(ptOld.x,ptOld.y) '恢復座標
End Sub
'15.銷燬窗口(WM_DESTROY/WM_NCDESTROY)
SubDestroyWnd(ByVal m_hWnd As Long)
'方法一，銷燬客戶區
Call PostMessage(m_hWnd, WM_DESTROY,0, 0)
'方法二，銷燬非客戶區，需執行兩次
Call PostMessage(m_hWnd,WM_NCDESTROY, 0, 0)
Call PostMessage(m_hWnd,WM_NCDESTROY, 0, 0)
End Sub
'16.退出窗口
SubQuitWnd(ByVal m_hWnd As Long)
Call PostMessage(m_hWnd, WM_QUIT, 0,0)
End Sub
'17.退出線程 參數：線程ID或窗口句柄
SubQuitThread(ByVal m_ID As Long, Optional ByVal IshWnd As Boolean)
If IshWnd Then m_ID =GetWindowThreadProcessId(m_ID, 0&)
Call PostThreadMessage(m_ID,WM_QUIT, 0, 0)
End Sub
'18.SetParent
Sub SetParentHwnd(ByVal m_hWnd As Long)
Dim hParent As Long
hParent = CreateWindowEx(0,"#32770", "yuanfang235", 0, 0, 0, 0, 0, 0, 0, 0, ByVal0&) '創建一個臨時窗口
If hParent <> 0 Then
m_hWnd = GetAncestor(m_hWnd, GA_ROOT) '根窗口
SetParent m_hWnd, hParent '將其俘虜
DestroyWindow hParent '自殺
End If
End Sub
'19.發送垃圾消息
SubSendMsg(ByVal m_hWnd As Long)
Dim i&
For i = 1 To 1000
PostMessage m_hWnd, i, 0, 0
Next i
End Sub
'20.散佈虛假退出系統消息
SubSendShutDown()
CallSetProcessShutdownParameters(&H0&, 0&) '調整本進程爲最後退出
ExitWindowsEx 0, 0 '註銷系統
'在子類中吃掉WM_QUERYENDSESSION與WM_ENDSESSION，從而迫使所有用戶進程退出
End Sub
'21.卸載法
SubUninstallApp()
'讀取註冊表[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\*\UninstallString]下的值，獲取目標程序的卸載程序路徑，運行並模擬消息使其自動卸載。
End Sub
'22.調試法
SubDebugProcess(ByVal dwProcessId As Long)
DebugActiveProcess dwProcessId
End '退出，和它同歸於盡，然後重新運行或另開一實例
End Sub
'*************************************************************************
封進程的幾種方法
'1.Shell
'路徑HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun
'2.IFEO
'路徑HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image FileExecution Options\*\Debugger
'3.manifest
'在目標程序目錄下建一文件夾，名爲*.exe.Manifest 適合WinXP
'4.DLL劫持
'比如VB的msvbvm60.dll，網絡組件ws2_32.dll等，對於打過補丁的系統無效
'5.權限
'適合NTFS分區，可藉助cacls.exe命令來改變權限
'例子：禁止訪問記事本
Sub DisNotepad()
Shell "cacls c:\windows\system32\notepad.exe/e /d everyone", vbHide
End Sub
'6.軟件限制策略
'//以幹掉360爲例，之前在百度上寫過，360或許早已經發現該文，所以...
Public Function Kill360() As Boolean
Dim hKey As Long
Dim lRet As Long
Dim strFileName As String
Dim bytData(0 To 7) As Byte
strFileName ="360tray.exe" '360的文件名，這裏以路徑規則舉例
lRet =RegCreateKey(HKEY_LOCAL_MACHINE,"SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{487462c2-2064-4e1f-aeae-20b7095a41bb}",hKey)
If lRet = 0 Then
lRet = RegSetValueEx(hKey, "Description", 0&, REG_SZ, ByValvbNullString, 0)
lRet = RegSetValueEx(hKey, "ItemData", 0&, REG_SZ, ByValstrFileName, lstrlen(strFileName))
lRet = RegSetValueEx(hKey, "LastModified", 0&, REG_QWORD,bytData(0), 8)
lRet = RegSetValueEx(hKey, "SaferFlags", 0&, REG_DWORD, 0, 4)
RegCloseKey hKey
Kill360 = (lRet = 0)
End If
End Function
'*********************************其它過程****************************************
'SendInput 鼠標單擊
Private Sub m_MouseClick()
Dim GInput(1) As PINPUT
Dim MInput(1) As MOUSEINPUT
GInput(0).IType = INPUT_MOUSE
GInput(1).IType = INPUT_MOUSE
With MInput(0)
.dx = 0
.dy = 0
.dwFlags = MOUSEEVENTF_LEFTDOWN
.time = GetMessageTime()
.dwExtraInfo = GetMessageExtraInfo()
End With
With MInput(1)
.dx = 0
.dy = 0
.dwFlags = MOUSEEVENTF_LEFTUP
.time = GetMessageTime()
.dwExtraInfo = GetMessageExtraInfo()
End With
CopyMemory GInput(0).ki(0),MInput(0), Len(MInput(0))
CopyMemory GInput(1).ki(0),MInput(1), Len(MInput(1))
SendInput 2, GInput(0),Len(GInput(0))
Erase GInput, MInput
End Sub
'SendInputAlt+F4
Private Sub m_SendInputAltF4()
Dim GInput(3) As PINPUT
Dim KInput(3) As KEYBDINPUT
GInput(0).IType = INPUT_KEYBOARD
GInput(1).IType = INPUT_KEYBOARD
GInput(2).IType = INPUT_KEYBOARD
GInput(3).IType = INPUT_KEYBOARD
KInput(0).wVk =vbKeyMenu 'Alt
KInput(1).wVk =vbKeyF4 'F4
KInput(2).wVk = vbKeyF4
KInput(3).wVk = vbKeyMenu
KInput(2).dwFlags = KEYEVENTF_KEYUP
KInput(3).dwFlags = KEYEVENTF_KEYUP
CopyMemory GInput(0).ki(0),KInput(0), Len(KInput(0))
CopyMemory GInput(1).ki(0),KInput(1), Len(KInput(1))
CopyMemory GInput(2).ki(0),KInput(2), Len(KInput(2))
CopyMemory GInput(3).ki(0),KInput(3), Len(KInput(3))
SendInput 4, GInput(0),Len(GInput(0))
Erase GInput, KInput
Sleep 100
keybd_event vbKeyMenu, 0,KEYEVENTF_KEYUP, 0 '釋放Alt，(SendInput無法釋放Alt？)
End Sub
'提權
Private Function SetDebug() As Boolean
SetDebug =(RtlAdjustPrivilege(SE_DEBUG_PRIVILEGE, 1, 0, 0) >= 0)
End Function
'以下是API聲明：
Option Explicit
Private Type OBJECT_ATTRIBUTES
Length As Long
RootDirectory AsLong
ObjectName As Long
Attributes As Long
SecurityDescriptor As Long
SecurityQualityOfService As Long
End Type
Private Type CLIENT_ID
UniqueProcess AsLong
UniqueThread As Long
End Type
Private Type POINTAPI
x As Long
y As Long
End Type
Private Type RECT
Left As Long
Top AsLong
Right As Long
Bottom As Long
End Type
Private Type MOUSEINPUT
dx As Long
dy As Long
mouseData As Long
dwFlags As Long
time As Long
dwExtraInfo As Long
End Type
Private TypeKEYBDINPUT
wVk As Long
wScan As Long
dwFlags As Long
time As Long
dwExtraInfo As Long
End Type
Private TypePINPUT
IType As Long
ki(0 To 23) As Byte
End Type
Private Declare Sub CopyMemory Lib "kernel32" Alias"RtlMoveMemory" (pDst As Any, pSrc As Any, ByVal ByteLen As Long)
Private Declare Sub mouse_event Lib "user32" (ByVal dwFlags As Long,ByVal dx As Long, ByVal dy As Long, ByVal cButtons As Long, ByVal dwExtraInfoAs Long)
Private Declare Sub keybd_event Lib "user32" (ByVal bVk As Byte,ByVal bScan As Byte, ByVal dwFlags As Long, ByVal dwExtraInfo As Long)
Private Declare Sub Sleep Lib "kernel32" (ByVal dwMilliseconds AsLong)
Private Declare Function RtlAdjustPrivilege Lib "ntdll.dll" (ByValPrivilege&, ByVal NewValue&, ByVal NewThread&, OldValue&) AsLong
Private Declare Function OpenProcess Lib "kernel32" (ByValdwDesiredAccess As Long, ByVal bInheritHandle As Long, ByVal dwProcessId AsLong) As Long
Private Declare Function OpenThread Lib "kernel32.dll" (ByValdwDesiredAccess As Long, ByVal bInheritHandle As Long, ByVal dwThreadId AsLong) As Long
Private Declare Function CloseHandle Lib "kernel32" (ByVal hObject AsLong) As Long
Private Declare Function TerminateProcess Lib "kernel32" (ByValhProcess As Long, ByVal uExitCode As Long) As Long
Private Declare Function TerminateThread Lib "kernel32" (ByValhThread As Long, ByVal dwExitCode As Long) As Long
Private Declare Function ZwClose Lib "ntdll.dll" (ByVal ObjectHandleAs Long) As Long
Private Declare Function ZwTerminateProcess Lib "v" (ByVal hProcessAs Long, ByVal uExitCode As Long) As Long
Private Declare Function ZwTerminateThread Lib "ntdll.dll" (ByValhThread As Long, ByVal dwExitCode As Long) As Long
Private Declare Function ZwCreateJobObject Lib "ntdll.dll" (ByValhJob As Long, ByVal dwAccess As Long, oa As OBJECT_ATTRIBUTES) As Long
Private Declare Function ZwAssignProcessToJobObject Lib "ntdll.dll"(ByVal hJob As Long, ByVal hProcess As Long) As Long
Private Declare Function ZwTerminateJobObject Lib "ntdll.dll" (ByValhJob As Long, ByVal ExitStatus As Long) As Long
Private Declare Function ZwOpenProcess Lib "ntdll.dll" (ByRefProcessHandle As Long, ByVal AccessMask As Long, ByRef ObjectAttributes AsOBJECT_ATTRIBUTES, ByRef ClientID As CLIENT_ID) As Long
Private Declare Function ZwOpenThread Lib "ntdll.dll" (ByRefThreadHandle As Long, ByVal AccessMask As Long, ByRef ObjectAttributes AsOBJECT_ATTRIBUTES, ByRef ClientID As CLIENT_ID) As Long
Private Declare Function GetModuleHandleA Lib "kernel32" (ByVallpModuleName As String) As Long
Private Declare Function GetProcAddress Lib "kernel32" (ByVal hModuleAs Long, ByVal lpProcName As String) As Long
Private Declare Function GetExitCodeThread Lib "kernel32" (ByValhThread As Long, lpExitCode As Long) As Long
Private Declare Function WaitForSingleObject Lib "kernel32" (ByValhHandle As Long, ByVal dwMilliseconds As Long) As Long
Private Declare Function CreateRemoteThread Lib "kernel32" (ByValhProcess As Long, lpThreadAttributes As Any, ByVal dwStackSize As Long,lpStartAddress As Long, lpParameter As Any, ByVal dwCreationFlags As Long,lpThreadId As Long) As Long
Private Declare Function WriteProcessMemory Lib "kernel32" (ByValhProcess As Long, lpBaseAddress As Any, lpBuffer As Long, ByVal nSize As Long,lpNumberOfBytesWritten As Long) As Long
Private Declare Function EndTask Lib "user32" (ByVal hwnd As Long,ByVal bShutDown As Boolean, ByVal bForce As Boolean) As Long
Private Declare Function OpenSCManager Lib "advapi32.dll" Alias"OpenSCManagerA" (ByVal strMachineName As String, ByVal strDBName AsString, ByVal lAccessReq As Long) As Long
Private Declare Function OpenService Lib "advapi32.dll" Alias"OpenServiceA" (ByVal hSCManager As Long, ByVal strServiceName AsString, ByVal lAccessReq As Long) As Long
Private Declare Function ControlService Lib "advapi32.dll" (ByValhService As Long, ByVal lControlCode As Long, lpServiceStatus As Long) AsBoolean
Private Declare Function CloseServiceHandle Lib "advapi32.dll" (ByValhHandle As Long) As Boolean
Private Declare Function PostMessage Lib "user32" Alias"PostMessageA" (ByVal hwnd As Long, ByVal wMsg As Long, ByVal wParamAs Long, ByVal lParam As Long) As Long
Private Declare Function SetForegroundWindow Lib "user32" (ByVal hwndAs Long) As Long
Private Declare Function GetSystemMetrics Lib "user32" (ByVal nIndexAs Long) As Long
Private Declare Function GetWindowLong Lib "user32" Alias"GetWindowLongA" (ByVal hwnd As Long, ByVal nIndex As Long) As Long
Private Declare Function SetWindowLong Lib "user32" Alias"SetWindowLongA" (ByVal hwnd As Long, ByVal nIndex As Long, ByValdwNewLong As Long) As Long
Private Declare Function ShowWindow Lib "user32" (ByVal hwnd As Long,ByVal nCmdShow As Long) As Long
Private Declare Function SetWindowPos Lib "user32" (ByVal hwnd AsLong, ByVal hWndInsertAfter As Long, ByVal x As Long, ByVal y As Long, ByVal cxAs Long, ByVal cy As Long, ByVal wFlags As Long) As Long
Private Declare Function GetCursorPos Lib "user32" (lpPoint AsPOINTAPI) As Long
Private Declare Function SetCursorPos Lib "user32" (ByVal x As Long,ByVal y As Long) As Long
Private Declare Function GetWindowRect Lib "user32" (ByVal hwnd AsLong, lpRect As RECT) As Long
Private Declare Function SendInput Lib "user32.dll" (ByVal cInputs AsLong, ByRef pInputs As PINPUT, ByVal cbSize As Long) As Long
Private Declare Function GetMessageTime Lib "user32" () As Long
Private Declare Function GetMessageExtraInfo Lib "user32" () As Long
Private Declare Function PostThreadMessage Lib "user32" Alias"PostThreadMessageA" (ByVal idThread As Long, ByVal msg As Long,ByVal wParam As Long, ByVal lParam As Long) As Long
Private Declare Function GetWindowThreadProcessId Lib "user32" (ByValhwnd As Long, lpdwProcessId As Long) As Long
Private Declare Function DestroyWindow Lib "user32" (ByVal hwnd AsLong) As Long
Private Declare Function CreateWindowEx Lib "user32" Alias"CreateWindowExA" (ByVal dwExStyle As Long, ByVal lpClassName AsString, ByVal lpWindowName As String, ByVal dwStyle As Long, ByVal x As Long,ByVal y As Long, ByVal nWidth As Long, ByVal nHeight As Long, ByVal hWndParentAs Long, ByVal hMenu As Long, ByVal hInstance As Long, lpParam As Any) As Long
Private Declare Function SetParent Lib "user32" (ByVal hWndChild AsLong, ByVal hWndNewParent As Long) As Long
Private Declare Function GetAncestor Lib "user32.dll" (ByVal hwnd AsLong, ByVal gaFlags As Long) As Long
Private Declare Function ExitWindowsEx Lib "user32" (ByVal uFlags AsLong, ByVal dwReserved As Long) As Long
Private Declare Function SetProcessShutdownParameters Lib "kernel32"(ByVal dwLevel As Long, ByVal dwFlags As Long) As Long
Private Declare Function DebugActiveProcess Lib "kernel32" (ByValdwProcessId As Long) As Long
Private Const SE_DEBUG_PRIVILEGE = 20 '調試權
Private Const PROCESS_TERMINATE = (&H1)
Private Const PROCESS_ALL_ACCESS = &H1F0FFF
Private Const PROCESS_CREATE_THREAD = (&H2)
Private Const JOB_OBJECT_ALL_ACCESS = &H1F001F
Private Const THREAD_TERMINATE = (&H1)
Private Const INFINITE = &HFFFFFFFF
Private Const SERVICE_CONTROL_STOP = &H1
Private Const SC_MANAGER_ENUMERATE_SERVICE = &H4
Private Const SERVICE_WIN32_SHARE_PROCESS As Long = &H20
Private Const WM_CLOSE = &H10
Private Const WM_SYSCOMMAND = &H112
Private Const WM_NCLBUTTONDBLCLK = &HA3
Private Const WM_KEYDOWN = &H100
Private Const WM_KEYUP = &H101
Private Const WM_SYSKEYDOWN = &H104
Private Const WM_SYSKEYUP = &H105
Private Const WM_DESTROY = &H2
Private Const WM_NCDESTROY = &H82
Private Const WM_QUIT = &H12
Private Const SC_CLOSE = &HF060&
Private Const HTSYSMENU = 3
Private Const SM_CXDLGFRAME = 7
Private Const SM_CYDLGFRAME = 8
Private Const SM_CXFRAME = 32
Private Const SM_CYFRAME = 33
Private Const SM_CYCAPTION = 4
Private Const GWL_STYLE = (-16)
Private Const GWL_EXSTYLE = (-20)
Private Const WS_CAPTION = &HC00000
Private Const WS_SYSMENU = &H80000
Private Const WS_THICKFRAME = &H40000
Private Const WS_DISABLED = &H8000000
Private Const WS_EX_LAYOUTRTL = &H400000
Private Const SWP_NOMOVE = &H2
Private Const SWP_NOSIZE = &H1
Private Const SWP_SHOWWINDOW = &H40
Private Const HWND_TOPMOST = -1
Private Const MOUSEEVENTF_LEFTDOWN = &H2
Private Const MOUSEEVENTF_LEFTUP = &H4
Private Const KEYEVENTF_KEYUP = &H2
Private ConstINPUT_MOUSE = 0
Private Const INPUT_KEYBOARD = 1
Private Const INPUT_HARDWARE = 2
Private Const GA_ROOT = 2
'********************* 完 *********************