C#在工作管理員裡隱藏

namespace WindowsAPI  
{  
/// <summary>  
/// 在WINDOWS工作管理員裡 不顯示程式  
/// qq:116149  
/// zgke@sina.copm  
/// </summary>  
    public class HideTaskmgrList  
    {  
private System.Timers.Timer m_Time = new System.Timers.Timer();  
private string m_ProcessName = "";  
private int m_ProcessID = 0;  

/// <summary>  
/// 程式名稱  
/// </summary>  
        public string ProcessName { get { return m_ProcessName; } set { m_ProcessName = value; } }  

/// <summary>  
/// 開始  
/// </summary>  
        public void Star()  
        {  
            m_Time.Enabled = true;  
        }  

/// <summary>  
/// 停止  
/// </summary>  
        public void Stop()  
        {  
            m_Time.Enabled = false;  
        }  

public HideTaskmgrList()  
        {  
            m_Time.Interval = 1;  
            m_Time.Elapsed += new System.Timers.ElapsedEventHandler(_Time_Elapsed);  
        }  

void _Time_Elapsed(object sender, System.Timers.ElapsedEventArgs e)  
        {  
            HideTaskmgrListOfName(m_ProcessName);  
        }  

/// <summary>  
/// 獲取所有控制元件  
/// </summary>  
/// <param name="p_Handle"></param>  
/// <param name="p_Param"></param>  
/// <returns></returns>  
        private bool NetEnumControl(IntPtr p_Handle, int p_Param)  
        {  
            WindowsAPI.Win32API.STRINGBUFFER _TextString = new WindowsAPI.Win32API.STRINGBUFFER();  
            WindowsAPI.Win32API.GetWindowText(p_Handle, out _TextString, 256);  

            WindowsAPI.Win32API.STRINGBUFFER _ClassName = new WindowsAPI.Win32API.STRINGBUFFER();  
            WindowsAPI.Win32API.GetClassName(p_Handle, out _ClassName, 255);  

if (_TextString.szText == "程式" && _ClassName.szText == "SysListView32")  
            {  
                Hide(p_Handle);  
return false;  
            }  

return true;  
        }  

/// <summary>  
/// 隱藏  
/// </summary>  
/// <param name="p_ListViewIntPtr"></param>  
        public void Hide(IntPtr p_ListViewIntPtr)  
        {  
            IntPtr _ControlIntPtr = p_ListViewIntPtr;  

int _ItemCount = WindowsAPI.Win32API.SendMessage(p_ListViewIntPtr, 0x1004, 0, 0);  

            WindowsAPI.Win32API.ProcessAccessType _Type;  
            _Type = WindowsAPI.Win32API.ProcessAccessType.PROCESS_VM_OPERATION | WindowsAPI.Win32API.ProcessAccessType.PROCESS_VM_READ | WindowsAPI.Win32API.ProcessAccessType.PROCESS_VM_WRITE;  

            IntPtr _ProcessIntPtr = WindowsAPI.Win32API.OpenProcess(_Type, 1, (uint)m_ProcessID);  

            IntPtr _Out = IntPtr.Zero;  
for (int z = 0; z != _ItemCount; z++)  
            {  

//分配一個記憶體地址 儲存程式的應用程式名稱  
                IntPtr _StrBufferMemory = WindowsAPI.Win32API.VirtualAllocEx(_ProcessIntPtr, 0, 255, WindowsAPI.Win32API.MEM_COMMIT.MEM_COMMIT, WindowsAPI.Win32API.MEM_PAGE.PAGE_READWRITE);  

byte[] _OutBytes = new byte[40];  //定義結構體 (LVITEM)          
  
byte[] _StrIntPtrAddress = BitConverter.GetBytes(_StrBufferMemory.ToInt32());  
                _OutBytes[20] = _StrIntPtrAddress[0];  
                _OutBytes[21] = _StrIntPtrAddress[1];  
                _OutBytes[22] = _StrIntPtrAddress[2];  
                _OutBytes[23] = _StrIntPtrAddress[3];  
                _OutBytes[24] = 255;  

//給結構體分配記憶體  
                IntPtr _Memory = WindowsAPI.Win32API.VirtualAllocEx(_ProcessIntPtr, 0, _OutBytes.Length, WindowsAPI.Win32API.MEM_COMMIT.MEM_COMMIT, WindowsAPI.Win32API.MEM_PAGE.PAGE_READWRITE);  
//把資料傳遞給結構體 (LVITEM)    
                WindowsAPI.Win32API.WriteProcessMemory(_ProcessIntPtr, _Memory, _OutBytes, (uint)_OutBytes.Length, out _Out);  

//傳送訊息獲取結構體資料  
                WindowsAPI.Win32API.SendMessage(p_ListViewIntPtr, 0x102D, z, _Memory);  

//獲取結構體資料  
                WindowsAPI.Win32API.ReadProcessMemory(_ProcessIntPtr, _Memory, _OutBytes, (uint)_OutBytes.Length, out _Out);  

//獲取結構體 pszText的地址  
                IntPtr _ValueIntPtr = new IntPtr(BitConverter.ToInt32(_OutBytes, 20));  

byte[] _TextBytes = new byte[255];  //獲取pszText的資料  
                WindowsAPI.Win32API.ReadProcessMemory(_ProcessIntPtr, _ValueIntPtr, _TextBytes, 255, out _Out);  
//獲取程式名稱   
                string _ProcessText = System.Text.Encoding.Default.GetString(_TextBytes).Trim(new Char[] { '\0' });  
//釋放記憶體  
                WindowsAPI.Win32API.VirtualFreeEx(_ProcessIntPtr, _StrBufferMemory, 0, WindowsAPI.Win32API.MEM_COMMIT.MEM_RELEASE);  
                WindowsAPI.Win32API.VirtualFreeEx(_ProcessIntPtr, _Memory, 0, WindowsAPI.Win32API.MEM_COMMIT.MEM_RELEASE);  

if (_ProcessText == m_ProcessName)  
                {  
                    WindowsAPI.Win32API.SendMessage(p_ListViewIntPtr, 0x1008, z, 0);  
                }  
            }  
        }  

/// <summary>  
/// 在WINDOWS工作管理員裡隱藏一行 需要一直呼叫 會被工作管理員重新整理出來  
/// </summary>  
/// <param name="p_Name">名稱 如QQ.exe</param>  
        public void HideTaskmgrListOfName(string p_Name)  
        {  
            System.Diagnostics.Process[] _ProcessList = System.Diagnostics.Process.GetProcessesByName("taskmgr");  
for (int i = 0; i != _ProcessList.Length; i++)  
            {  
if (_ProcessList[i].MainWindowTitle == "Windows 工作管理員")  
                {  
                    m_ProcessID = _ProcessList[i].Id;  
                    WindowsAPI.Win32API.EnumWindowsProc _EunmControl = new WindowsAPI.Win32API.EnumWindowsProc(NetEnumControl);  

                    WindowsAPI.Win32API.EnumChildWindows(_ProcessList[i].MainWindowHandle, _EunmControl, 0);  
                }  
            }  
        }  
    }  


public class Win32API  
    {  

public enum MEM_PAGE  
        {  
            PAGE_NOACCESS = 0x1,  
            PAGE_READONLY = 0x2,  
            PAGE_READWRITE = 0x4,  
            PAGE_WRITECOPY = 0x8,  
            PAGE_EXECUTE = 0x10,  
            PAGE_EXECUTE_READ = 0x20,  
            PAGE_EXECUTE_READWRITE = 0x40,  
            PAGE_EXECUTE_READWRITECOPY = 0x50,  
            PAGE_EXECUTE_WRITECOPY = 0x80,  
            PAGE_GUARD = 0x100,  
            PAGE_NOCACHE = 0x200,  
            PAGE_WRITECOMBINE = 0x400,  
        }  



public enum MEM_COMMIT  
        {  
            MEM_COMMIT = 0x1000,  
            MEM_RESERVE = 0x2000,  
            MEM_DECOMMIT = 0x4000,  
            MEM_RELEASE = 0x8000,  
            MEM_FREE = 0x10000,  
            MEM_PRIVATE = 0x20000,  
            MEM_MAPPED = 0x40000,  
            MEM_RESET = 0x80000,  
            MEM_TOP_DOWN = 0x100000,  
            MEM_WRITE_WATCH = 0x200000,  
            MEM_PHYSICAL = 0x400000,  
            MEM_IMAGE = 0x1000000  
        }  

        [Flags]  
public enum ProcessAccessType  
        {  
            PROCESS_TERMINATE = (0x0001),  
            PROCESS_CREATE_THREAD = (0x0002),  
            PROCESS_SET_SESSIONID = (0x0004),  
            PROCESS_VM_OPERATION = (0x0008),  
            PROCESS_VM_READ = (0x0010),  
            PROCESS_VM_WRITE = (0x0020),  
            PROCESS_DUP_HANDLE = (0x0040),  
            PROCESS_CREATE_PROCESS = (0x0080),  
            PROCESS_SET_QUOTA = (0x0100),  
            PROCESS_SET_INFORMATION = (0x0200),  
            PROCESS_QUERY_INFORMATION = (0x0400)  
        }  

        [StructLayout(LayoutKind.Sequential, CharSet = CharSet.Auto)]  
public struct STRINGBUFFER  
        {  
            [MarshalAs(UnmanagedType.ByValTStr, SizeConst = 512)]  
public string szText;  
        }  
public delegate bool EnumWindowsProc(IntPtr p_Handle, int p_Param);  


        [DllImport("kernel32.dll")]  
public static extern IntPtr OpenProcess(ProcessAccessType dwDesiredAccess, int bInheritHandle, uint dwProcessId);  

        [DllImport("kernel32.dll")]  
public static extern Int32 CloseHandle(IntPtr hObject);  

        [DllImport("kernel32.dll")]  
public static extern Int32 ReadProcessMemory(IntPtr hProcess, IntPtr lpBaseAddress, [In, Out] byte[] buffer, UInt32 size, out IntPtr lpNumberOfBytesRead);  

        [DllImport("kernel32.dll")]  
public static extern Int32 WriteProcessMemory(IntPtr hProcess, IntPtr lpBaseAddress, [In, Out] byte[] buffer, UInt32 size, out IntPtr lpNumberOfBytesWritten);  

        [DllImport("kernel32.dll")]  
public static extern IntPtr VirtualAllocEx(IntPtr hProcess, int lpAddress, int dwSize, MEM_COMMIT flAllocationType, MEM_PAGE flProtect);  

        [DllImport("kernel32.dll")]  
public static extern IntPtr VirtualFreeEx(IntPtr hProcess, IntPtr lpAddress, int dwSize, MEM_COMMIT dwFreeType);  

        [DllImport("User32.dll", CharSet = CharSet.Auto)]  
public static extern int GetWindowText(IntPtr hWnd, out STRINGBUFFER text, int nMaxCount);  

        [DllImport("User32.dll", CharSet = CharSet.Auto)]  
public static extern int GetClassName(IntPtr hWnd, out STRINGBUFFER ClassName, int nMaxCount);  

        [DllImport("user32.dll", CharSet = CharSet.Auto)]  
public static extern int SendMessage(IntPtr hWnd, int Msg, int wParam, int lParam);  

        [DllImport("user32.dll", CharSet = CharSet.Auto)]  
public static extern int SendMessage(IntPtr hWnd, int Msg, int wParam, IntPtr lParam);  

        [DllImport("user32.dll")]  
public static extern int EnumChildWindows(IntPtr hWndParent, EnumWindowsProc ewp, int lParam);  

    }  



}