c# winform使用API屏蔽系统热键和任务管理器

using System;

using System.Collections.Generic;

using System.ComponentModel;

using System.Data;

using System.Drawing;

using System.Text;

using System.Windows.Forms;

using System.Runtime.InteropServices;

using System.IO;

using System.Diagnostics;

namespace Forbid

{

public partial class Form1 : Form

{

public Form1()

{

InitializeComponent();

this.Load+=new EventHandler(Form1_Load);

}

private void Form1_Load(object sender, EventArgs e)

{

Hook_Start();

}

private void Form1_FormClosed(object sender, FormClosedEventArgs e)

{

Hook_Clear();

}

#region 屏蔽键盘第一步:声明API

//设置钩子

[DllImport("user32.dll")]

public static extern int SetWindowsHookEx(int idHook, HookProc lpfn, IntPtr hInstance, int threadId);

[DllImport("user32.dll", CharSet = CharSet.Auto, CallingConvention = CallingConvention.StdCall)]

//抽掉钩子

public static extern bool UnhookWindowsHookEx(int idHook);

[DllImport("user32.dll")]

//调用下一个钩子

public static extern int CallNextHookEx(int idHook, int nCode, int wParam, IntPtr lParam);

[DllImport("kernel32.dll")]

public static extern int GetCurrentThreadId();

[DllImport("kernel32.dll")]

public static extern IntPtr GetModuleHandle(string name);

#endregion

#region 屏蔽键盘第二步: 定义委托

public delegate int HookProc(int nCode, int wParam, IntPtr lParam);

static int hHook = 0;

public const int WH_KEYBOARD_LL = 13;

//LowLevel键盘截获，如果是WH_KEYBOARD＝2，并不能对系统键盘截取，Acrobat Reader会在你截取之前获得键盘。

HookProc KeyBoardHookProcedure;

FileStream MyFs;//用流来屏蔽ctrl+alt+del

//键盘Hook结构函数

[StructLayout(LayoutKind.Sequential)]

public class KeyBoardHookStruct

{

public int vkCode;

public int scanCode;

public int flags;

public int time;

public int dwExtraInfo;

}

#endregion

#region 屏蔽键盘第三步：编写钩子子程

//钩子要做的事，你要处理什么？

public static int KeyBoardHookProc(int nCode, int wParam, IntPtr lParam)

{

if (nCode >= 0)

{

KeyBoardHookStruct kbh = (KeyBoardHookStruct)Marshal.PtrToStructure(lParam, typeof(KeyBoardHookStruct));

if (kbh.vkCode == 91) // 截获左win(开始菜单键)

{

return 1;

}

if (kbh.vkCode == 92)// 截获右win

{

return 1;

}

if (kbh.vkCode == (int)Keys.Escape && (int)Control.ModifierKeys == (int)Keys.Control) //截获Ctrl+Esc

{

return 1;

}

if (kbh.vkCode == (int)Keys.F4 && (int)Control.ModifierKeys == (int)Keys.Alt) //截获alt+f4

{

return 1;

}

if (kbh.vkCode == (int)Keys.F4 && (int)Control.ModifierKeys == (int)Keys.Alt + (int)Keys.Shift) //截获Alt+Shift+f4

{

return 1;

}

if (kbh.vkCode == (int)Keys.Tab && (int)Control.ModifierKeys == (int)Keys.Alt) //截获alt+tab

{

return 1;

}

if (kbh.vkCode == (int)Keys.Tab && (int)Control.ModifierKeys == (int)Keys.Alt + (int)Keys.Shift) //截获Alt+Shift+tab

{

return 1;

}

if (kbh.vkCode == (int)Keys.Escape && (int)Control.ModifierKeys == (int)Keys.Alt)//截获alt+esc

{

return 1;

}

if (kbh.vkCode == (int)Keys.Escape && (int)Control.ModifierKeys == (int)Keys.Alt + (int)Keys.Shift) //截获Alt+Shift+esc

{

return 1;

}

if (kbh.vkCode == (int)Keys.Escape && (int)Control.ModifierKeys == (int)Keys.Control + (int)Keys.Shift) //截获Ctrl+Shift+Esc

{

return 1;

}

if (kbh.vkCode == (int)Keys.Space && (int)Control.ModifierKeys == (int)Keys.Alt) //截获alt+空格

{

return 1;

}

if (kbh.vkCode == 241) //截获F1

{

return 1;

}

//if (kbh.vkCode == (int)Keys.Space && (int)Control.ModifierKeys == (int)Keys.Control + (int)Keys.Alt) //截获Ctrl+Alt+空格

//{

// return 1;

//}

}

return CallNextHookEx(hHook, nCode, wParam, lParam);

}

#endregion

#region 屏蔽键盘第四步：调用的方法

//打开钩子 ,并用流屏蔽任务管理器

public void Hook_Start()

{

// 安装键盘钩子

if (hHook == 0)

{

KeyBoardHookProcedure = new HookProc(KeyBoardHookProc);

hHook = SetWindowsHookEx(WH_KEYBOARD_LL, KeyBoardHookProcedure,

GetModuleHandle(Process.GetCurrentProcess().MainModule.ModuleName), 0);

//如果设置钩子失败.

if (hHook == 0)

{

Hook_Clear();

//throw new Exception("设置Hook失败!");

}

MyFs = new FileStream(Environment.ExpandEnvironmentVariables("%windir%\\system32\\taskmgr.exe"), FileMode.Open);

byte[] MyByte = new byte[(int)MyFs.Length];

MyFs.Write(MyByte, 0, (int)MyFs.Length);

}

}

//PS：也可以通过将[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]

//下的DisableTaskmgr项的值设为"1”来屏蔽任务管理器。

//取消钩子事件 ,并关闭流，取消对任务管理器的屏蔽

public void Hook_Clear()

{

bool retKeyboard = true;

if (hHook != 0)

{

retKeyboard = UnhookWindowsHookEx(hHook);

hHook = 0;

}

if (null != MyFs)

{

MyFs.Close();

}

//如果去掉钩子失败.

if (!retKeyboard) throw new Exception("UnhookWindowsHookEx failed.");

}

#endregion

}

}