方法一：用 Resource Hacker 修改 taskmgr.exe
具体是，Dialog→110，将 1009 那行删除，或把 1009 随便改个数字，如改成 10091。
这样行吗？如果行的话→
下载修改好的 taskmgr.exe。
替换掉系统的 taskmgr.exe 的方法：
方法1：可能先要对 c:\WINDOWS\system32\dllcache\taskmgr.exe 进行重命名，然后才能替换 c:\WINDOWS\system32\taskmgr.exe。
方法2：用“映像劫持”。运行下列命令：
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe" /v debugger /t reg_sz /d "修改过的 taskmgr.exe 的路径" /f
方法二：用命令行工具 NirCmd
命令是：nircmd win child title "Windows 任务管理器" hide class "SysListView32"
【应用程序】【进程】【用户】都是清一色地空白。
如果你要用户启动”Windows 任务管理器“时也是这样的，我觉得唯一的办法是，把上面的命令编译到 exe 中，然后”映像劫持“启动这个 exe。
用 AutoHotkey 编译。代码基本上是这样：
#NoTrayIcon
run,taskmgr.exe
WinWait,Windows 任务管理器
run,nircmd win child title "Windows 任务管理器" hide class "SysListView32"
效果是，用户眼睁睁地看着进程列表被隐藏。如果这样没关系的话→
下载编译好的 exe。
如果上面那样有关系的话，那就先最小化taskmgr.exe→隐藏列表→激活窗口。代码：
#NoTrayIcon
run,taskmgr.exe,,Min
WinWait,Windows 任务管理器
run,nircmd win child title "Windows 任务管理器" hide class "SysListView32"
sleep 300
WinActivate,Windows 任务管理器
下载
当然了，还要把 Nircmd.exe 扔到 %windir% 里。
AutoHotkey 应该可以直接实现那个隐藏功能...
Last edited by tireless on 2008-9-13 at 03:15 AM ]
**Method 1: Modify taskmgr.exe with Resource Hacker**
Specifically, in Dialog→110, delete the line with 1009, or change 1009 to any other number, such as changing it to 10091.
Is this okay? If it is, then →
Download the modified taskmgr.exe.
Method to replace the system's taskmgr.exe:
Method 1: Possibly first rename c:\WINDOWS\system32\dllcache\taskmgr.exe, and then you can replace c:\WINDOWS\system32\taskmgr.exe.
Method 2: Use "image hijacking". Run the following command:
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe" /v debugger /t reg_sz /d "path of the modified taskmgr.exe" /f
Method 2: Use the command-line tool NirCmd
The command is: nircmd win child title "Windows Task Manager" hide class "SysListView32"
are all uniformly blank.
If you want the user to start "Windows Task Manager" to be like this, I think the only way is to compile the above command into an exe, and then "image hijack" to start this exe.
Compile with AutoHotkey. The code is basically like this:
#NoTrayIcon
run,taskmgr.exe
WinWait,Windows 任务管理器
run,nircmd win child title "Windows 任务管理器" hide class "SysListView32"
The effect is that the user watches the process list being hidden. If this is okay, then →
Download the compiled exe.
If the above is problematic, then first minimize taskmgr.exe → hide the list → activate the window. The code:
#NoTrayIcon
run,taskmgr.exe,,Min
WinWait,Windows 任务管理器
run,nircmd win child title "Windows 任务管理器" hide class "SysListView32"
sleep 300
WinActivate,Windows 任务管理器
Download
Of course, you also need to put Nircmd.exe into %windir%.
AutoHotkey should be able to directly implement that hiding function...
Last edited by tireless on 2008-9-13 at 03:15 AM ]
