怎样用C#写进程监控服务

Question

大家好

    我想用C#写一个windows服务，对进程进行监控。我现在的问题是，我想实现：当启动xxx进程的时候，如果不是我定义的进程，我希望能结束它。说白了就是不让用户启动非法进程。我看到有个 PsSetCreateProcessNotifyRoutine 这个函数，但是不知道怎样使用。。。

Answer 1

你好：

在.net中已经提供了System.Diagnostics.Process类，通过这个类你可以获取到当前进程的信息：

Process[] ps = Process.GetProcesses();
foreach(Process p in ps){
   Console.WriteLine("Process: {0} ID: {1}", p.ProcessName, p.Id);
}

你也可以查看进程的其它信息，具体可以参考MSDN文档。

---

We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click HERE to participate the survey.

Answer 2

是对其他process create的时候进行监控，不是监控当前系统的进程。

Answer 3

你可以尝试一下这个帖子中的代码，是通过WMI来监控进程的创建的：

Event to detect when a new process is created in windows

---

We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click HERE to participate the survey.

Answer 4

http://blog.csdn.net/yushiqiang1688/article/details/5209597