Sie sind aktuell nicht angemeldet.

Funktionen: Einloggen  |  Neu registrieren  |  Suchen

Re: Prozess Owner
Autor: majoo
Datum: 11.03.04 17:24
teil 2 rem _________________________________________________________ rem Modul ProzessOwner Private Const TOKEN_READ As Long = &H20008 Private Const SECURITY_BUILTIN_DOMAIN_RID As Long = &H20& Private Const SECURITY_NT_AUTHORITY As Long = &H5 Private Const PROCESS_QUERY_INFORMATION As Long = 1024 Private Const PROCESS_VM_READ As Long = 16 Private Const DOMAIN_ALIAS_RID_USERS = &H221 Private Const TokenUser = 1 Private Type SID_IDENTIFIER_AUTHORITY Value(6) As Byte End Type Private Type SID_AND_ATTRIBUTES Sid As Long Attributes As Long End Type Private Type TOKEN_GROUPS GroupCount As Long Groups(500) As SID_AND_ATTRIBUTES End Type Private Type TOKEN_USER User As SID_AND_ATTRIBUTES End Type Private Declare Function LookupAccountSid Lib "advapi32.dll" Alias "LookupAccountSidA" (ByVal lpSystemName As String, ByVal Sid As Long, ByVal name As String, cbName As Long, ByVal ReferencedDomainName As String, cbReferencedDomainName As Long, peUse As Long) As Long Private Declare Function AllocateAndInitializeSid Lib "advapi32.dll" (pIdentifierAuthority As SID_IDENTIFIER_AUTHORITY, ByVal nSubAuthorityCount As Byte, ByVal nSubAuthority0 As Long, ByVal nSubAuthority1 As Long, ByVal nSubAuthority2 As Long, ByVal nSubAuthority3 As Long, ByVal nSubAuthority4 As Long, ByVal nSubAuthority5 As Long, ByVal nSubAuthority6 As Long, ByVal nSubAuthority7 As Long, lpPSid As Long) As Long Private Declare Function OpenProcessToken Lib "advapi32.dll" (ByVal ProcessHandle As Long, ByVal DesiredAccess As Long, TokenHandle As Long) As Long Private Declare Function GetTokenInformation Lib "advapi32.dll" (ByVal TokenHandle As Long, ByVal TokenInformationClass As Long, TokenInformation As Any, ByVal TokenInformationLength As Long, ReturnLength As Long) As Long Private Declare Function GetCurrentProcess Lib "kernel32" () As Long Private Declare Sub FreeSid Lib "advapi32.dll" (pSid As Any) Private Declare Function CloseHandle Lib "kernel32" (ByVal hObject As Long) As Long Public Declare Function OpenProcess Lib "Kernel32.dll" (ByVal dwDesiredAccessas As Long, ByVal bInheritHandle As Long, ByVal dwProcId As Long) As Long Public Function GetProcessUserName(ByVal ProcessID As Long) As String Dim hProcessID As Long Dim hToken As Long Dim res As Long Dim cbBuff As Long Dim tiLen As Long Dim TG As TOKEN_GROUPS Dim TU As TOKEN_USER Dim SIA As SID_IDENTIFIER_AUTHORITY Dim lSid As Long Dim cnt As Long Dim sAcctName1 As String Dim sAcctName2 As String Dim cbAcctName As Long Dim sDomainName As String Dim cbDomainName As Long Dim peUse As Long tiLen = 0 hProcessID = OpenProcess(PROCESS_QUERY_INFORMATION Or PROCESS_VM_READ, 0, ProcessID) If hProcessID <> 0 Then If OpenProcessToken(hProcessID, TOKEN_READ, hToken) = 1 Then res = GetTokenInformation(hToken, TokenUser, TU, tiLen, cbBuff) If res = 0 And cbBuff > 0 Then tiLen = cbBuff res = GetTokenInformation(hToken, TokenUser, TU, tiLen, cbBuff) If res = 1 And tiLen > 0 Then SIA.Value(5) = SECURITY_NT_AUTHORITY res = AllocateAndInitializeSid(SIA, 2, SECURITY_BUILTIN_DOMAIN_RID, DOMAIN_ALIAS_RID_USERS, 0, 0, 0, 0, 0, 0, lSid) If res = 1 Then sAcctName1 = Space$(255) sDomainName = Space$(255) cbAcctName = 255 cbDomainName = 255 res = LookupAccountSid(vbNullString, lSid, sAcctName1, cbAcctName, sDomainName, cbDomainName, peUse) If res = 1 Then sAcctName2 = Space$(255) sDomainName = Space$(255) cbAcctName = 255 cbDomainName = 255 res = LookupAccountSid(vbNullString, TU.User.Sid, sAcctName2, cbAcctName, sDomainName, cbDomainName, peUse) GetProcessUserName = Replace(Trim(sAcctName2), Chr(0), "") End If FreeSid ByVal lSid End If CloseHandle hToken End If End If End If CloseHandle hProcessID End If Owner = GetProcessUserName End Function

Prozess Owner	2.322	majoo	10.03.04 22:07
Re: Prozess Owner	1.597	E7	11.03.04 16:09
Re: Prozess Owner	1.668	majoo	11.03.04 17:23
Re: Prozess Owner	1.619	majoo	11.03.04 17:24
Re: Prozess Owner	1.572	majoo	11.03.04 17:24
Re: Prozess Owner	1.518	Obi	18.03.04 09:22
Re: Prozess Owner	1.431	majoo	18.03.04 20:52
Re: Prozess Owner	1.461	Obi	18.03.04 21:25
Re: Prozess Owner	1.412	majoo	20.03.04 16:08
Re: Prozess Owner	1.382	Obi	20.03.04 17:15
Re: Prozess Owner	1.351	majoo	20.03.04 18:51
Re: Prozess Owner	1.355	Dubs	23.03.04 15:58
Re: Prozess Owner	3.281	Obi	26.03.04 23:40
Re: Prozess Owner	1.566	majoo	27.03.04 10:05

Sie sind nicht angemeldet! Um auf diesen Beitrag zu antworten oder neue Beiträge schreiben zu können, müssen Sie sich zunächst anmelden. Einloggen  |  Neu registrieren

Funktionen:  Zum Thema  |  Gesamtübersicht

Suchen