我愿付出我的所有所有分，请教VB如何获取和修改PEB
点击联系发帖人
时间：2018-07-09 18:51
IC型号索引： &B&&&&F&&&&J&&&&N&&&&R&&&&V&&&&Z&&&&3&&&&7&&
在采购PEB2085P-VB2.0进货过程中，您使用搜索有什么问题和建议？
免责声明：以上所展示的PEB2085P-VB2.0信息由会员自行提供，PEB2085P-VB2.0内容的真实性、准确性和合法性由发布会员负责。捷配网不承担任何责任。
友情提醒：为规避购买PEB2085P-VB2.0产品风险，建议您在购买PEB2085P-VB2.0相关产品前务必确认供应商资质及产品质量。推荐使用"DZSC委托交易服务"，买卖都安全。VB 卸载USB设备/解锁文件
这次索性贴完整源码,希望能对大家有所帮助.
frmMain.frm
VERSION 5.00Begin VB.Form frmMain
BorderStyle
'Fixed Single
"Usb卸载程序"
ClientHeight
ClientLeft
ClientWidth
ScaleHeight
ScaleWidth
StartUpPosition =
Begin VB.CommandButton cmdAbout
"关于(&A)"
Begin VB.CommandButton cmdExit
"退出(&C)"
Begin VB.CommandButton cmdUnLoad
"卸载(&U)"
Begin VB.TextBox txtUsbDrive
Begin VB.Label lblMsg
"输入USB盘符:"
EndEndAttribute VB_Name = "frmMain"Attribute VB_GlobalNameSpace = FalseAttribute VB_Creatable = FalseAttribute VB_PredeclaredId = TrueAttribute VB_Exposed = FalsePrivate Sub cmdAbout_Click()
Shell "explorer /s , "
MsgBox "欢迎大家使用我编写的卸载USB程序,如果您在使用中发现有什么BUG或者是好的建" & vbNewLine & "议可以到我的博客上留言反映情况。地址是: ", vbInformation, "关于"End Sub
Private Sub cmdExit_Click()
Unload MeEnd Sub
Private Sub cmdUnLoad_Click()
Dim lngLenPath As Long, blnIsUsb As Boolean, strPath As String
lngLenPath = Len(txtUsbDrive.Text)
If lngLenPath &= 3 And Dir(txtUsbDrive.Text, 1 Or 2 Or 4 Or vbDirectory) && "" Then
If lngLenPath = 2 Then
If GetDriveBusType(txtUsbDrive.Text) && "Usb" Then
MsgBox "只能解锁USB设备分区！！", vbCritical, "错误"
txtUsbDrive.SetFocus
strPath = txtUsbDrive.Text & "/"
ElseIf lngLenPath = 1 Then
If GetDriveBusType(txtUsbDrive.Text & ":") && "Usb" Then
MsgBox "只能解锁USB设备分区！！", vbCritical, "错误"
txtUsbDrive.SetFocus
strPath = txtUsbDrive.Text & ":/"
If GetDriveBusType(Left(txtUsbDrive.Text, 2)) && "Usb" Then
MsgBox "只能解锁USB设备分区！！", vbCritical, "错误"
txtUsbDrive.SetFocus
strPath = txtUsbDrive.Text
blnIsUsb = True
MsgBox "您输入的USB盘符不要求！！", vbCritical, "错误"
txtUsbDrive.SetFocus
Me.cmdUnLoad.Enabled = False
Me.cmdExit.Enabled = False
'这里只检测本进程因为在获取驱动器类型的时候会打开一个句柄但是WINDOWS没有自己关闭所以用这个来
'解除锁定，当然你也可以使用CloseLoackFiles函数来检测所有进程
If CloseLockFileHandle(Left(strPath, 2), GetCurrentProcessId) Then
If blnIsUsb Then
If RemoveUsbDrive("//./" & Left(strPath, 2), True) Then
MsgBox "卸载UBS设备成功！！", , "提示"
MsgBox "但卸载UBS设备失败！！", vbCritical, "提示"
MsgBox "发现有锁定文件还没解锁！！", vbCritical, "提示"
Me.cmdUnLoad.Enabled = True
Me.cmdExit.Enabled = TrueEnd Sub
modGetDriveType.bas
Attribute VB_Name = "modGetDriveType"Option Explicit'****************************************************************************************************************'此模块来自于网络'****************************************************************************************************************'判断驱动器的类型
Private Declare Function GetDriveType Lib "kernel32" Alias "GetDriveTypeA" (ByVal nDrive As String) As Long
Private Const DRIVE_UNKNOWN = 0
'驱动器类型无法确定Private Const DRIVE_NO_ROOT_DIR = 1
'驱动器根目录不存在Private Const DRIVE_REMOVABLE = 2
'软盘驱动器或可移动盘Private Const DRIVE_FIXED = 3
'硬盘驱动器Private Const DRIVE_REMOTE = 4
'Network 驱动器Private Const DRIVE_CDROM = 5
'光盘驱动器Private Const DRIVE_RAMDISK = 6
'RAM 存储器
'****************************************************************************************************************
' CreateFile获取设备句柄
'参数'lpFileName
文件名'dwDesiredAccess
访问方式'dwShareMode
共享方式'ATTRIBUTES lpSecurityAttributes
安全描述符指针'dwCreationDisposition
创建方式'dwFlagsAndAttributes
文件属性及标志' hTemplateFile
模板文件的句柄
'CreateFile这个函数用处很多，这里我们用它「打开」设备驱动程序，得到设备的句柄。'操作完成後用CloseHandle关闭设备句柄。'与普通文件名有所不同，设备驱动的「文件名」形式固定为「//./DeviceName」(注意在C程序中该字符串写法为「////.//DeviceName」)'DeviceName必须与设备驱动程序内规定的设备名称一致。'一般地，调用CreateFile获得设备句柄时，访问方式参数设置为0或GENERIC_READ|GENERIC_WRITE'共享方式参数设置为FILE_SHARE_READ|FILE_SHARE_WRITE，创建方式参数设置为OPEN_EXISTING，其它参数设置为0或NULL。
Private Declare Function CreateFile Lib "kernel32" Alias "CreateFileA" (ByVal lpFileName As String, ByVal dwDesiredAccess As Long, ByVal dwShareMode As Long, lpSecurityAttributes As Any, ByVal dwCreationDisposition As Long, ByVal dwFlagsAndAttributes As Long, ByVal hTemplateFile As Long) As LongPrivate Declare Function CloseHandle Lib "kernel32" (ByVal hObject As Long) As Long
Private Const GENERIC_READ = &H
'允许对设备进行读访问Private Const FILE_SHARE_READ = &H1
'允许读取共享Private Const OPEN_EXISTING = 3
'文件必须已经存在。由设备提出要求Private Const FILE_SHARE_WRITE = &H2
'允许对文件进行共享访问
'****************************************************************************************************************
'DeviceIoControl说明
实现对设备的访问—获取信息，发送命令，交换数据等。
'参数'hDevice
设备句柄'dwIoControlCode
控制码'lpInBuffer
输入数据缓冲区指针'nInBufferSize
输入数据缓冲区长度'lpOutBuffer
输出数据缓冲区指针'nOutBufferSize
输出数据缓冲区长度'lpBytesReturned
输出数据实际长度单元长度'lpOverlapped
重叠操作结构指针Private Declare Function DeviceIoControl Lib "kernel32" (ByVal hDevice As Long, ByVal dwIoControlCode As Long, lpInBuffer As Any, ByVal nInBufferSize As Long, lpOutBuffer As Any, ByVal nOutBufferSize As Long, lpBytesReturned As Long, lpOverlapped As OVERLAPPED) As Long
Private Type SECURITY_ATTRIBUTES
nLength As Long
'结构体的大小
lpSecurityDescriptor As Long
'安全描述符（一个C-Style的字符串）。
bInheritHandle As Long
'所创建出来的东西是可以被其他的子进程使用的End Type
'查询存储设备还是适配器属性Private Enum STORAGE_PROPERTY_ID
StorageDeviceProperty = 0
'查询设备属性
StorageAdapterProperty
'查询适配器属性End Enum
'查询存储设备属性的类型Private Enum STORAGE_QUERY_TYPE
PropertyStandardQuery = 0
PropertyExistsQuery
'测试是否支持
PropertyMaskQuery
'读取指定的描述
PropertyQueryMaxDefined
'验证数据End Enum
'查询属性输入的数据结构Private Type STORAGE_PROPERTY_QUERY
PropertyId As STORAGE_PROPERTY_ID
'设备/适配器
QueryType As STORAGE_QUERY_TYPE
AdditionalParameters(0) As Byte
'额外的数据(仅定义了象徵性的1个字节)End Type
Private Type OVERLAPPED
Internal As Long
'保留给操作系统使用。用于保存系统状态，当GetOverLappedRseult的返回值中没有设置ERROR_IO_PENDING时，本域为有效。
InternalHigh As Long
'成员保留给操作系统使用。用于保存异步传输数据的长度。当GetOverLappedRseult返回TRUE时，本域为有效。
offset As Long
'指定开始进行异步传输的文件的一个位置。该位置是距离文件开头处的偏移值。在调用ReadFile或WriteFile之前，必须设置此分量。
OffsetHigh As Long
'指定开始异步传输处的字节偏移的高位字部分。
hEvent As Long
'指向一个事件的句柄，当传输完后将其设置为信号状态。End Type
'存储设备的总线类型Private Enum STORAGE_BUS_TYPE
BusTypeUnknown = 0
BusTypeScsi
BusTypeAtapi
BusTypeAta
BusType1394
BusTypeSsa
BusTypeFibre
BusTypeUsb
BusTypeRAID
BusTypeMaxReserved = &H7FEnd Enum
'查询属性输出的数据结构Private Type STORAGE_DEVICE_DESCRIPTOR
Version As Long
Size As Long
DeviceType As Byte
DeviceTypeModifier As Byte
'SCSI-2额外的设备类型
RemovableMedia As Byte
'是否可移动
CommandQueueing As Byte
'是否支持命令队列
VendorIdOffset As Long
'厂家设定值的偏移
ProductIdOffset As Long
'产品ID的偏移
ProductRevisionOffset As Long
'产品版本的偏移
SerialNumberOffset As Long
'序列号的偏移
BusType As STORAGE_BUS_TYPE
RawPropertiesLength As Long
'额外的属性数据长度
RawDeviceProperties(0) As Byte
'额外的属性数据(仅定义了象徵性的1个字节)End Type
'计算控制码
IOCTL_STORAGE_QUERY_PROPERTYPrivate Const IOCTL_STORAGE_BASE As Long = &H2DPrivate Const METHOD_BUFFERED = 0Private Const FILE_ANY_ACCESS = 0
'获取磁盘属性Private Function GetDisksProperty(ByVal hDevice As Long, utDevDesc As STORAGE_DEVICE_DESCRIPTOR) As Boolean
Dim ut As OVERLAPPED
Dim utQuery As STORAGE_PROPERTY_QUERY
Dim lOutBytes As Long
With utQuery
.PropertyId = StorageDeviceProperty
.QueryType = PropertyStandardQuery
GetDisksProperty = DeviceIoControl(hDevice, IOCTL_STORAGE_QUERY_PROPERTY, utQuery, LenB(utQuery), utDevDesc, LenB(utDevDesc), lOutBytes, ut)End Function
Private Function CTL_CODE(ByVal lDeviceType As Long, ByVal lFunction As Long, ByVal lMethod As Long, ByVal lAccess As Long) As Long
CTL_CODE = (lDeviceType * 2 ^ 16&) Or (lAccess * 2 ^ 14&) Or (lFunction * 2 ^ 2) Or (lMethod)End Function
'获取设备属性信息，希望得到系统中所安装的各种固定的和可移动的硬盘、优盘和CD/DVD-ROM/R/W的接口类型、序列号、产品ID等信息。Private Function IOCTL_STORAGE_QUERY_PROPERTY() As Long
IOCTL_STORAGE_QUERY_PROPERTY = CTL_CODE(IOCTL_STORAGE_BASE, &H500, METHOD_BUFFERED, FILE_ANY_ACCESS)End Function
'获取驱动器总线类型Public Function GetDriveBusType(ByVal strDriveLetter As String) As String
Dim hDevice As Long
Dim utDevDesc As STORAGE_DEVICE_DESCRIPTOR
hDevice = CreateFile("//./" & strDriveLetter, GENERIC_READ, FILE_SHARE_READ Or FILE_SHARE_WRITE, ByVal 0&, OPEN_EXISTING, 0, 0)
If hDevice && -1 Then
utDevDesc.Size = LenB(utDevDesc)
Call GetDisksProperty(hDevice, utDevDesc)
Select Case utDevDesc.BusType
Case BusType1394
GetDriveBusType = "1394"
Case BusTypeAta
GetDriveBusType = "Ata"
Case BusTypeAtapi
GetDriveBusType = "Atapi"
Case BusTypeFibre
GetDriveBusType = "Fibre"
Case BusTypeRAID
GetDriveBusType = "RAID"
Case BusTypeScsi
GetDriveBusType = "Scsi"
Case BusTypeSsa
GetDriveBusType = "Ssa"
Case BusTypeUsb
GetDriveBusType = "Usb"
Case BusTypeUnknown
GetDriveBusType = "未知"
End Select
Call CloseHandle(hDevice)
End IfEnd Function
modLockFileInfo.bas
Attribute VB_Name = "modLockFileInfo"Option Explicit
Private Declare Function NtQueryInformationProcess Lib "NTDLL.DLL" (ByVal ProcessHandle As Long, _
ByVal ProcessInformationClass As PROCESSINFOCLASS, _
ByVal ProcessInformation As Long, _
ByVal ProcessInformationLength As Long, _
ByRef ReturnLength As Long) As Long
Private Enum PROCESSINFOCLASS
ProcessBasicInformation = 0
ProcessQuotaLimits
ProcessIoCounters
ProcessVmCounters
ProcessTimes
ProcessBasePriority
ProcessRaisePriority
ProcessDebugPort
ProcessExceptionPort
ProcessAccessToken
ProcessLdtInformation
ProcessLdtSize
ProcessDefaultHardErrorMode
ProcessIoPortHandlers
ProcessPooledUsageAndLimits
ProcessWorkingSetWatch
ProcessUserModeIOPL
ProcessEnableAlignmentFaultFixup
ProcessPriorityClass
ProcessWx86Information
ProcessHandleCount
ProcessAffinityMask
ProcessPriorityBoost
ProcessDeviceMap
ProcessSessionInformation
ProcessForegroundInformation
ProcessWow64Information
ProcessImageFileName
ProcessLUIDDeviceMapsEnabled
ProcessBreakOnTermination
ProcessDebugObjectHandle
ProcessDebugFlags
ProcessHandleTracing
ProcessIoPriority
ProcessExecuteFlags
ProcessResourceManagement
ProcessCookie
ProcessImageInformation
MaxProcessInfoClassEnd Enum
Private Type PROCESS_BASIC_INFORMATION
ExitStatus As Long 'NTSTATUS
PebBaseAddress As Long 'PPEB
AffinityMask As Long 'ULONG_PTR
BasePriority As Long 'KPRIORITY
UniqueProcessId As Long 'ULONG_PTR
InheritedFromUniqueProcessId As Long 'ULONG_PTREnd Type
Private Type FILE_NAME_INFORMATION
FileNameLength As Long
FileName(3) As ByteEnd Type
Private Type NM_INFO
Info As FILE_NAME_INFORMATION
strName(259) As ByteEnd Type
Private Enum FileInformationClass
FileDirectoryInformation = 1
FileFullDirectoryInformation = 2
FileBothDirectoryInformation = 3
FileBasicInformation = 4
FileStandardInformation = 5
FileInternalInformation = 6
FileEaInformation = 7
FileAccessInformation = 8
FileNameInformation = 9
FileRenameInformation = 10
FileLinkInformation = 11
FileNamesInformation = 12
FileDispositionInformation = 13
FilePositionInformation = 14
FileFullEaInformation = 15
FileModeInformation = 16
FileAlignmentInformation = 17
FileAllInformation = 18
FileAllocationInformation = 19
FileEndOfFileInformation = 20
FileAlternateNameInformation = 21
FileStreamInformation = 22
FilePipeInformation = 23
FilePipeLocalInformation = 24
FilePipeRemoteInformation = 25
FileMailslotQueryInformation = 26
FileMailslotSetInformation = 27
FileCompressionInformation = 28
FileObjectIdInformation = 29
FileCompletionInformation = 30
FileMoveClusterInformation = 31
FileQuotaInformation = 32
FileReparsePointInformation = 33
FileNetworkOpenInformation = 34
FileAttributeTagInformation = 35
FileTrackingInformation = 36
FileMaximumInformationEnd Enum
Private Declare Function NtQuerySystemInformation Lib "NTDLL.DLL" (ByVal SystemInformationClass As SYSTEM_INFORMATION_CLASS, _
ByVal pSystemInformation As Long, _
ByVal SystemInformationLength As Long, _
ByRef ReturnLength As Long) As Long
Private Enum SYSTEM_INFORMATION_CLASS
SystemBasicInformation
SystemProcessorInformation
'// obsolete...delete
SystemPerformanceInformation
SystemTimeOfDayInformation
SystemPathInformation
SystemProcessInformation
SystemCallCountInformation
SystemDeviceInformation
SystemProcessorPerformanceInformation
SystemFlagsInformation
SystemCallTimeInformation
SystemModuleInformation
SystemLocksInformation
SystemStackTraceInformation
SystemPagedPoolInformation
SystemNonPagedPoolInformation
SystemHandleInformation
SystemObjectInformation
SystemPageFileInformation
SystemVdmInstemulInformation
SystemVdmBopInformation
SystemFileCacheInformation
SystemPoolTagInformation
SystemInterruptInformation
SystemDpcBehaviorInformation
SystemFullMemoryInformation
SystemLoadGdiDriverInformation
SystemUnloadGdiDriverInformation
SystemTimeAdjustmentInformation
SystemSummaryMemoryInformation
SystemMirrorMemoryInformation
SystemPerformanceTraceInformation
SystemObsolete0
SystemExceptionInformation
SystemCrashDumpStateInformation
SystemKernelDebuggerInformation
SystemContextSwitchInformation
SystemRegistryQuotaInformation
SystemExtendServiceTableInformation
SystemPrioritySeperation
SystemVerifierAddDriverInformation
SystemVerifierRemoveDriverInformation
SystemProcessorIdleInformation
SystemLegacyDriverInformation
SystemCurrentTimeZoneInformation
SystemLookasideInformation
SystemTimeSlipNotification
SystemSessionCreate
SystemSessionDetach
SystemSessionInformation
SystemRangeStartInformation
SystemVerifierInformation
SystemVerifierThunkExtend
SystemSessionProcessInformation
SystemLoadGdiDriverInSystemSpace
SystemNumaProcessorMap
SystemPrefetcherInformation
SystemExtendedProcessInformation
SystemRecommendedSharedDataAlignment
SystemComPlusPackage
SystemNumaAvailableMemory
SystemProcessorPowerInformation
SystemEmulationBasicInformation
SystemEmulationProcessorInformation
SystemExtendedHandleInformation
SystemLostDelayedWriteInformation
SystemBigPoolInformation
SystemSessionPoolTagInformation
SystemSessionMappedViewInformation
SystemHotpatchInformation
SystemObjectSecurityMode
SystemWatchdogTimerHandler
SystemWatchdogTimerInformation
SystemLogicalProcessorInformation
SystemWow64SharedInformation
SystemRegisterFirmwareTableInformationHandler
SystemFirmwareTableInformation
SystemModuleInformationEx
SystemVerifierTriageInformation
SystemSuperfetchInformation
SystemMemoryListInformation
SystemFileCacheInformationEx
MaxSystemInfoClass
'// MaxSystemInfoClass should always be the last enumEnd Enum
Private Type SYSTEM_HANDLE
UniqueProcessId As Integer
CreatorBackTraceIndex As Integer
ObjectTypeIndex As Byte
HandleAttributes As Byte
HandleValue As Integer
pObject As Long
GrantedAccess As LongEnd Type
Private Const STATUS_INFO_LENGTH_MISMATCH = &HC0000004
Private Enum SYSTEM_HANDLE_TYPE
OB_TYPE_UNKNOWN = 0
OB_TYPE_TYPE = 1
OB_TYPE_DIRECTORY
OB_TYPE_SYMBOLIC_LINK
OB_TYPE_TOKEN
OB_TYPE_PROCESS
OB_TYPE_THREAD
OB_TYPE_UNKNOWN_7
OB_TYPE_EVENT
OB_TYPE_EVENT_PAIR
OB_TYPE_MUTANT
OB_TYPE_UNKNOWN_11
OB_TYPE_SEMAPHORE
OB_TYPE_TIMER
OB_TYPE_PROFILE
OB_TYPE_WINDOW_STATION
OB_TYPE_DESKTOP
OB_TYPE_SECTION
OB_TYPE_KEY
OB_TYPE_PORT
OB_TYPE_WAITABLE_PORT
OB_TYPE_UNKNOWN_21
OB_TYPE_UNKNOWN_22
OB_TYPE_UNKNOWN_23
OB_TYPE_UNKNOWN_24
OB_TYPE_IO_COMPLETION
OB_TYPE_FILEEnd Enum
'typedef struct _SYSTEM_HANDLE_INFORMATION'{ '
SYSTEM_HANDLE
aSH[];'} SYSTEM_HANDLE_INFORMATION, *PSYSTEM_HANDLE_INFORMATION;
Private Type SYSTEM_HANDLE_INFORMATION
uCount As Long
aSH() As SYSTEM_HANDLEEnd Type
Private Declare Function NtDuplicateObject Lib "NTDLL.DLL" (ByVal SourceProcessHandle As Long, _
ByVal SourceHandle As Long, _
ByVal TargetProcessHandle As Long, _
ByRef TargetHandle As Long, _
ByVal DesiredAccess As Long, _
ByVal HandleAttributes As Long, _
ByVal Options As Long) As Long
Private Const DUPLICATE_CLOSE_SOURCE = &H1
Private Const DUPLICATE_SAME_ACCESS = &H2
Private Const DUPLICATE_SAME_ATTRIBUTES = &H4
Private Declare Function NtOpenProcess Lib "NTDLL.DLL" (ByRef ProcessHandle As Long, _
ByVal AccessMask As Long, _
ByRef ObjectAttributes As OBJECT_ATTRIBUTES, _
ByRef ClientID As CLIENT_ID) As Long
Private Type OBJECT_ATTRIBUTES
Length As Long
RootDirectory As Long
ObjectName As Long
Attributes As Long
SecurityDescriptor As Long
SecurityQualityOfService As LongEnd Type
Private Type CLIENT_ID
UniqueProcess As Long
UniqueThread
As LongEnd Type
Private Type IO_STATUS_BLOCK
Status As Long
uInformation As LongEnd Type
Private Const PROCESS_CREATE_THREAD = &H2
Private Const PROCESS_VM_WRITE = &H20Private Const PROCESS_VM_OPERATION = &H8
Private Const PROCESS_QUERY_INFORMATION As Long = (&H400)
Private Const STANDARD_RIGHTS_REQUIRED As Long = &HF0000
Private Const SYNCHRONIZE As Long = &H100000
Private Const PROCESS_ALL_ACCESS As Long = (STANDARD_RIGHTS_REQUIRED Or SYNCHRONIZE Or &HFFF)
Private Const PROCESS_DUP_HANDLE As Long = (&H40)
Private Declare Function NtClose Lib "NTDLL.DLL" (ByVal ObjectHandle As Long) As Long
Private Declare Sub CopyMemory Lib "kernel32.dll" Alias "RtlMoveMemory" (ByRef Destination As Any, _
ByRef Source As Any, _
ByVal Length As Long)
Private Declare Function CreateFile Lib "kernel32" Alias "CreateFileA" (ByVal lpFileName As String, ByVal dwDesiredAccess As Long, ByVal dwShareMode As Long, lpSecurityAttributes As Any, ByVal dwCreationDisposition As Long, ByVal dwFlagsAndAttributes As Long, ByVal hTemplateFile As Long) As Long
'typedef struct _OBJECT_NAME_INFORMATION'{'
UNICODE_STRING
N'} OBJECT_NAME_INFORMATION, *POBJECT_NAME_INFORMATION;'typedef enum _OBJECT_INFORMATION_CLASS'{'
ObjectBasicInformation,
ObjectNameInformation,
ObjectTypeInformation,
ObjectAllTypesInformation,
ObjectHandleInformation
Y'} OBJECT_INFORMATION_CLASS;Private Enum OBJECT_INFORMATION_CLASS
ObjectBasicInformation = 0
ObjectNameInformation
ObjectTypeInformation
ObjectAllTypesInformation
ObjectHandleInformationEnd Enum''typedef struct _UNICODE_STRING'{'
USHORT MaximumL'
PWSTR B'} UNICODE_STRING, *PUNICODE_STRING;Private Type UNICODE_STRING
uLength As Integer
uMaximumLength As Integer
pBuffer(3) As ByteEnd Type
Private Type OBJECT_NAME_INFORMATION
pName As UNICODE_STRINGEnd TypePrivate Const STATUS_INFO_LEN_MISMATCH = &HC0000004Private Const HEAP_ZERO_MEMORY = &H8Public Declare Function GetCurrentProcessId Lib "kernel32" () As LongPrivate Declare Function GetCurrentProcess Lib "kernel32" () As LongPrivate Declare Function TerminateProcess Lib "kernel32" (ByVal hProcess As Long, ByVal uExitCode As Long) As LongPrivate Declare Function GetProcessHeap Lib "kernel32" () As LongPrivate Declare Function HeapFree Lib "kernel32" (ByVal hHeap As Long, ByVal dwFlags As Long, lpMem As Any) As LongPrivate Declare Function HeapReAlloc Lib "kernel32" (ByVal hHeap As Long, ByVal dwFlags As Long, lpMem As Any, ByVal dwBytes As Long) As LongPrivate Declare Function HeapAlloc Lib "kernel32" (ByVal hHeap As Long, ByVal dwFlags As Long, ByVal dwBytes As Long) As Long'Private Declare Function NtQueryObject Lib "NTDLL.DLL" (ByVal ObjectHandle As Long, _'
ByVal ObjectInformationClass As OBJECT_INFORMATION_CLASS, _'
ObjectInformation As Any, ByVal ObjectInformationLength As Long, _'
ReturnLength As Long) As LongPrivate Declare Function NtQueryObject Lib "NTDLL.DLL" (ByVal ObjectHandle As Long, _
ByVal ObjectInformationClass As OBJECT_INFORMATION_CLASS, _
ByVal ObjectInformation As Long, ByVal ObjectInformationLength As Long, _
ReturnLength As Long) As LongPrivate Declare Function lstrlenW Lib "kernel32" (ByVal lpString As Long) As LongPrivate Declare Function QueryDosDevice Lib "kernel32" Alias "QueryDosDeviceA" (ByVal lpDeviceName As String, ByVal lpTargetPath As String, ByVal ucchMax As Long) As LongPrivate Declare Function GetLogicalDriveStrings Lib "kernel32" Alias "GetLogicalDriveStringsA" (ByVal nBufferLength As Long, ByVal lpBuffer As String) As LongPrivate Declare Function lstrcpyW Lib "kernel32" (ByVal lpString1 As String, ByVal lpString2 As Long) As LongPublic Declare Function MessageBox Lib "user32" Alias "MessageBoxA" (ByVal hWnd As Long, ByVal lpText As String, ByVal lpCaption As String, ByVal wType As Long) As LongPrivate Declare Function CreateRemoteThread Lib "kernel32" (ByVal hProcess As Long, lpThreadAttributes As Any, ByVal dwStackSize As Long, lpStartAddress As Long, lpParameter As Any, ByVal dwCreationFlags As Long, lpThreadId As Long) As LongPrivate Declare Function WaitForSingleObject Lib "kernel32" (ByVal hHandle As Long, ByVal dwMilliseconds As Long) As Long'Private Declare Function CloseHandle Lib "kernel32" (ByVal hObject As Long) As LongPrivate Declare Function GetExitCodeThread Lib "kernel32" (ByVal hThread As Long, lpExitCode As Long) As LongPrivate Declare Function LoadLibrary Lib "kernel32" Alias "LoadLibraryA" (ByVal lpLibFileName As String) As LongPrivate Declare Function FreeLibrary Lib "kernel32" (ByVal hLibModule As Long) As LongPrivate Declare Function GetModuleHandle Lib "kernel32" Alias "GetModuleHandleA" (ByVal lpModuleName As String) As LongPrivate Declare Function GetProcAddress Lib "kernel32" (ByVal hModule As Long, ByVal lpProcName As String) As LongPrivate Declare Function TerminateThread Lib "kernel32" (ByVal hThread As Long, ByVal dwExitCode As Long) As LongPrivate Declare Function GetFileType Lib "kernel32" (ByVal hFile As Long) As LongPrivate Declare Function ReadProcessMemory Lib "kernel32" (ByVal hProcess As Long, lpBaseAddress As Any, lpBuffer As Any, ByVal nSize As Long, lpNumberOfBytesWritten As Long) As Long
Private Function NT_SUCCESS(ByVal nStatus As Long) As Boolean
NT_SUCCESS = (nStatus &= 0)End Function
Public Function GetFileFullPath(ByVal hFile As Long) As String
Dim hHeap As Long, dwSize As Long, objName As UNICODE_STRING, pName As Long
Dim ntStatus As Long, i As Long, lngNameSize As Long, strDrives As String, strArray() As String
Dim dwDriversSize As Long, strDrive As String, strTmp As String, strTemp As String
On Error GoTo ErrHandle
hHeap = GetProcessHeap
pName = HeapAlloc(hHeap, HEAP_ZERO_MEMORY, &H1000)
ntStatus = NtQueryObject(hFile, ObjectNameInformation, pName, &H1000, dwSize)
If (NT_SUCCESS(ntStatus)) Then
Do While (ntStatus = STATUS_INFO_LEN_MISMATCH)
pName = HeapReAlloc(hHeap, HEAP_ZERO_MEMORY, pName, &H1000 * i)
ntStatus = NtQueryObject(hFile, ObjectNameInformation, pName, &H1000, ByVal 0)
HeapFree hHeap, 0, pName
strTemp = String(512, Chr(0))
lstrcpyW strTemp, pName + Len(objName)
strTemp = StrConv(strTemp, vbFromUnicode)
strTemp = Left(strTemp, InStr(strTemp, Chr(0)) - 1)
strDrives = String(512, Chr(9))
dwDriversSize = GetLogicalDriveStrings(512, strDrives)
If dwDriversSize Then
strArray = Split(strDrives, Chr(0))
For i = 0 To UBound(strArray)
If strArray(i) && "" Then
strDrive = Left(strArray(i), 2)
strTmp = String(260, Chr(0))
Call QueryDosDevice(strDrive, strTmp, 256)
strTmp = Left(strTmp, InStr(strTmp, Chr(0)) - 1)
If InStr(LCase(strTemp), LCase(strTmp)) = 1 Then
GetFileFullPath = strDrive & Mid(strTemp, Len(strTmp) + 1, Len(strTemp) - Len(strTmp))
Exit Function
End IfErrHandle:End Function
Public Function CloseLockFileHandle(ByVal strFileName As String, ByVal dwProcessId As Long) As Boolean
Dim ntStatus As Long
Dim objCid As CLIENT_ID
Dim objOa As OBJECT_ATTRIBUTES
Dim lngHandles As Long
Dim i As Long
Dim objInfo As SYSTEM_HANDLE_INFORMATION, lngType As Long
Dim hProcess As Long, hProcessToDup As Long, hFileHandle As Long
Dim hFile As Long
'Dim objIo As IO_STATUS_BLOCK, objFn As FILE_NAME_INFORMATION, objN As NM_INFO
Dim bytBytes() As Byte, strSubPath As String, strTmp As String
Dim blnIsOk As Boolean
strSubPath = Mid(strFileName, 3, Len(strFileName) - 2)
hFile = CreateFile("NUL", &H, ByVal 0&, 3, 0, 0)
If hFile = -1 Then
CloseLockFileHandle = False
Exit Function
objOa.Length = Len(objOa)
objCid.UniqueProcess = dwProcessId
ntStatus = 0
Dim bytBuf() As Byte
Dim nSize As Long
ReDim bytBuf(nSize)
ntStatus = NtQuerySystemInformation(SystemHandleInformation, VarPtr(bytBuf(0)), nSize, 0&)
If (Not NT_SUCCESS(ntStatus)) Then
If (ntStatus && STATUS_INFO_LENGTH_MISMATCH) Then
Erase bytBuf
Exit Function
nSize = nSize * 2
ReDim bytBuf(nSize)
lngHandles = 0
CopyMemory objInfo.uCount, bytBuf(0), 4
lngHandles = objInfo.uCount
ReDim objInfo.aSH(lngHandles - 1)
Call CopyMemory(objInfo.aSH(0), bytBuf(4), Len(objInfo.aSH(0)) * lngHandles)
For i = 0 To lngHandles - 1
If objInfo.aSH(i).HandleValue = hFile And objInfo.aSH(i).UniqueProcessId = GetCurrentProcessId Then
lngType = objInfo.aSH(i).ObjectTypeIndex
NtClose hFile
blnIsOk = True
For i = 0 To lngHandles - 1
If objInfo.aSH(i).ObjectTypeIndex = lngType And objInfo.aSH(i).UniqueProcessId = dwProcessId Then
ntStatus = NtOpenProcess(hProcessToDup, PROCESS_DUP_HANDLE, objOa, objCid)
If hProcessToDup && 0 Then
ntStatus = NtDuplicateObject(hProcessToDup, objInfo.aSH(i).HandleValue, GetCurrentProcess, hFileHandle, 0, 0, DUPLICATE_SAME_ATTRIBUTES)
If (NT_SUCCESS(ntStatus)) Then
'这里如果直接调用NtQueryObject可能会挂起解决方法是用线程去处理当线程处理时间超过一定时间就把它干掉
'由于VB对多线程支持很差，其实应该说是对CreateThread支持很差，什么原因不要问我，相信网上也写有不少
'文件是关于它的,这里我选择了另一个函数也可以建立线程但是它是建立远程线程的，不过它却很稳定正好解决了
'我们这里的问题它就是CreateRemoteThread,^_^还记得我说过它很强大吧~~哈哈。
ntStatus = MyGetFileType(hFileHandle)
If ntStatus Then
strTmp = GetFileFullPath(hFileHandle)
NtClose hFileHandle
If InStr(LCase(strTmp), LCase(strFileName)) Then
If Not CloseRemoteHandle(dwProcessId, objInfo.aSH(i).HandleValue, strFileName) Then
blnIsOk = False
CloseLockFileHandle = blnIsOkEnd Function
'检测所有进程Public Function CloseLoackFiles(ByVal strFileName As String) As Boolean
Dim ntStatus As Long
Dim objCid As CLIENT_ID
Dim objOa As OBJECT_ATTRIBUTES
Dim lngHandles As Long
Dim i As Long
Dim objInfo As SYSTEM_HANDLE_INFORMATION, lngType As Long
Dim hProcess As Long, hProcessToDup As Long, hFileHandle As Long
Dim hFile As Long, blnIsOk As Boolean, strProcessName As String
'Dim objIo As IO_STATUS_BLOCK, objFn As FILE_NAME_INFORMATION, objN As NM_INFO
Dim bytBytes() As Byte, strSubPath As String, strTmp As String
strSubPath = Mid(strFileName, 3, Len(strFileName) - 2)
hFile = CreateFile("NUL", &H, ByVal 0&, 3, 0, 0)
If hFile = -1 Then
CloseLoackFiles = False
Exit Function
objOa.Length = Len(objOa)
ntStatus = 0
Dim bytBuf() As Byte
Dim nSize As Long
ReDim bytBuf(nSize)
ntStatus = NtQuerySystemInformation(SystemHandleInformation, VarPtr(bytBuf(0)), nSize, 0&)
If (Not NT_SUCCESS(ntStatus)) Then
If (ntStatus && STATUS_INFO_LENGTH_MISMATCH) Then
Erase bytBuf
Exit Function
nSize = nSize * 2
ReDim bytBuf(nSize)
lngHandles = 0
CopyMemory objInfo.uCount, bytBuf(0), 4
lngHandles = objInfo.uCount
ReDim objInfo.aSH(lngHandles - 1)
Call CopyMemory(objInfo.aSH(0), bytBuf(4), Len(objInfo.aSH(0)) * lngHandles)
For i = 0 To lngHandles - 1
If objInfo.aSH(i).HandleValue = hFile And objInfo.aSH(i).UniqueProcessId = GetCurrentProcessId Then
lngType = objInfo.aSH(i).ObjectTypeIndex
NtClose hFile
blnIsOk = True
For i = 0 To lngHandles - 1
If objInfo.aSH(i).ObjectTypeIndex = lngType Then
objCid.UniqueProcess = objInfo.aSH(i).UniqueProcessId
ntStatus = NtOpenProcess(hProcessToDup, PROCESS_DUP_HANDLE, objOa, objCid)
If hProcessToDup && 0 Then
ntStatus = NtDuplicateObject(hProcessToDup, objInfo.aSH(i).HandleValue, GetCurrentProcess, hFileHandle, 0, 0, DUPLICATE_SAME_ATTRIBUTES)
If (NT_SUCCESS(ntStatus)) Then
'这里如果直接调用NtQueryObject可能会挂起解决方法是用线程去处理当线程处理时间超过一定时间就把它干掉
'由于VB对多线程支持很差，其实应该说是对CreateThread支持很差，什么原因不要问我，相信网上也写有不少
'文件是关于它的,这里我选择了另一个函数也可以建立线程但是它是建立远程线程的，不过它却很稳定正好解决了
'我们这里的问题它就是CreateRemoteThread,^_^还记得我说过它很强大吧~~哈哈。
ntStatus = MyGetFileType(hFileHandle)
If ntStatus Then
strTmp = GetFileFullPath(hFileHandle)
strTmp = ""
NtClose hFileHandle
If InStr(LCase(strTmp), LCase(strFileName)) Then
If Not CloseRemoteHandle(objInfo.aSH(i).UniqueProcessId, objInfo.aSH(i).HandleValue, strTmp) Then
blnIsOk = False
CloseLoackFiles = blnIsOkEnd Function
Private Function GetProcessCommandLine(ByVal dwProcessId As Long) As String
Dim objCid As CLIENT_ID
Dim objOa As OBJECT_ATTRIBUTES
Dim ntStatus As Long, hKernel As Long, strName As String
Dim hProcess As Long, dwAddr As Long, dwRead As Long
objOa.Length = Len(objOa)
objCid.UniqueProcess = dwProcessId
ntStatus = NtOpenProcess(hProcess, &H10, objOa, objCid)
If hProcess = 0 Then
GetProcessCommandLine = ""
Exit Function
hKernel = GetModuleHandle("kernel32")
dwAddr = GetProcAddress(hKernel, "GetCommandLineA")
CopyMemory dwAddr, ByVal dwAddr + 1, 4
If ReadProcessMemory(hProcess, ByVal dwAddr, dwAddr, 4, dwRead) Then
strName = String(260, Chr(0))
If ReadProcessMemory(hProcess, ByVal dwAddr, ByVal strName, 260, dwRead) Then
strName = Left(strName, InStr(strName, Chr(0)) - 1)
NtClose hProcess
GetProcessCommandLine = strName
Exit Function
NtClose hProcessEnd Function
'解锁指定进程的锁定文件Public Function CloseRemoteHandle(ByVal dwProcessId, ByVal hHandle As Long, Optional ByVal strLockFile As String = "") As Boolean
Dim hMyProcess
As Long, hRemProcess As Long, blnResult As Long, hMyHandle As Long
Dim objCid As CLIENT_ID
Dim objOa As OBJECT_ATTRIBUTES
Dim ntStatus As Long, strProcessName As String, hProcess As Long, strMsg As String
objCid.UniqueProcess = dwProcessId
objOa.Length = Len(objOa)
hMyProcess = GetCurrentProcess()
ntStatus = NtOpenProcess(hRemProcess, PROCESS_DUP_HANDLE, objOa, objCid)
If hRemProcess Then
ntStatus = NtDuplicateObject(hRemProcess, hHandle, GetCurrentProcess, hMyHandle, 0, 0, DUPLICATE_CLOSE_SOURCE Or DUPLICATE_SAME_ACCESS)
If (NT_SUCCESS(ntStatus)) Then
'If DuplicateHandle(hRemProcess, hMyProcess, hHandle, hMyHandle, 0, 0, DUPLICATE_CLOSE_SOURCE Or DUPLICATE_SAME_ACCESS) Then
blnResult = NtClose(hMyHandle)
If blnResult &= 0 Then
strProcessName = GetProcessCommandLine(dwProcessId)
'If InStr(LCase(strProcessName), LCase(strLockFile)) Then
If InStr(LCase(strProcessName), "explorer.exe") = 0 And dwProcessId && GetCurrentProcessId Then
objCid.UniqueProcess = dwProcessId
ntStatus = NtOpenProcess(hProcess, 1, objOa, objCid)
If hProcess && 0 Then TerminateProcess hProcess, 0
Call NtClose(hRemProcess)
CloseRemoteHandle = blnResult &= 0End Function
'解锁指定进程的锁定文件Public Function CloseRemoteHandleEx(ByVal dwProcessId, ByVal hHandle As Long, Optional ByVal strLockFile As String = "") As Boolean
Dim hRemProcess As Long, hThread As Long, lngResult As Long, pfnThreadRtn As Long, hKernel As Long
Dim objCid As CLIENT_ID
Dim objOa As OBJECT_ATTRIBUTES, strMsg As String
Dim ntStatus As Long, strProcessName As String, hProcess As Long
objCid.UniqueProcess = dwProcessId
objOa.Length = Len(objOa)
ntStatus = NtOpenProcess(hRemProcess, PROCESS_QUERY_INFORMATION Or PROCESS_CREATE_THREAD Or PROCESS_VM_OPERATION Or PROCESS_VM_WRITE, objOa, objCid)'
hMyProcess = OpenProcess(PROCESS_QUERY_INFORMATION Or PROCESS_CREATE_THREAD Or PROCESS_VM_OPERATION Or PROCESS_VM_WRITE, 0, dwProcessId)
If hRemProcess = 0 Then
CloseRemoteHandleEx = False
Exit Function
hKernel = GetModuleHandle("kernel32")
If hKernel = 0 Then
CloseRemoteHandleEx = False
Exit Function
pfnThreadRtn = GetProcAddress(hKernel, "CloseHandle")
If pfnThreadRtn = 0 Then
FreeLibrary hKernel
CloseRemoteHandleEx = False
Exit Function
hThread = CreateRemoteThread(hRemProcess, ByVal 0&, 0&, ByVal pfnThreadRtn, ByVal hHandle, 0, 0&)
If hThread = 0 Then
FreeLibrary hKernel
CloseRemoteHandleEx = False
Exit Function
GetExitCodeThread hThread, lngResult
CloseRemoteHandleEx = CBool(lngResult)
strProcessName = GetProcessCommandLine(dwProcessId)
If InStr(strProcessName, strLockFile) Then
objCid.UniqueProcess = dwProcessId
ntStatus = NtOpenProcess(hProcess, 1, objOa, objCid)
If hProcess && 0 Then TerminateProcess hProcess, 0
NtClose hThread
NtClose hRemProcess
FreeLibrary hKernelEnd Function
Private Function MyGetFileType(ByVal hFile As Long) As Long
Dim hRemProcess As Long, hThread As Long, lngResult As Long, pfnThreadRtn As Long, hKernel As Long
Dim dwEax As Long, dwTimeOut As Long
hRemProcess = GetCurrentProcess
hKernel = GetModuleHandle("kernel32")
If hKernel = 0 Then
MyGetFileType = 0
Exit Function
pfnThreadRtn = GetProcAddress(hKernel, "GetFileType")
If pfnThreadRtn = 0 Then
FreeLibrary hKernel
MyGetFileType = 0
Exit Function
hThread = CreateRemoteThread(hRemProcess, ByVal 0&, 0&, ByVal pfnThreadRtn, ByVal hFile, 0, ByVal 0&)
dwEax = WaitForSingleObject(hThread, 100)
If dwEax = &H102 Then
Call GetExitCodeThread(hThread, dwTimeOut)
Call TerminateThread(hThread, dwTimeOut)
NtClose hThread
MyGetFileType = 0
Exit Function
If hThread = 0 Then
FreeLibrary hKernel
MyGetFileType = False
Exit Function
GetExitCodeThread hThread, lngResult
MyGetFileType = lngResult
NtClose hThread
NtClose hRemProcess
FreeLibrary hKernelEnd Function
modRemoveUsbDrive.bas
Attribute VB_Name = "modRemoveUsbDrive"Option Explicit'****************************************************************************************************************'此模块是通过转换C++代码而来'****************************************************************************************************************Private Type GUID
Data1 As Long
Data2 As Integer
Data3 As Integer
Data4(0 To 7) As ByteEnd Type
'typedef struct _SP_DEVICE_INTERFACE_DETAIL_DATA_A {'
DevicePath[ANYSIZE_ARRAY];'} SP_DEVICE_INTERFACE_DETAIL_DATA_A, *PSP_DEVICE_INTERFACE_DETAIL_DATA_A;Private Type SP_DEVICE_INTERFACE_DETAIL_DATA
cbSize As Long
strDevicePath As String * 260End Type
Private Type SP_DEVICE_INTERFACE_DATA
cbSize As Long 'taille de la structure en octets
InterfaceClassGuid As GUID 'GUID de la classe d'interface
flags As Long 'options
Reserved As Long 'réservéEnd Type
Private Type SP_DEVINFO_DATA
cbSize As Long 'taille de la structure en octets
ClassGuid As GUID 'GUID de la classe d'installation
DevInst As Long 'handle utilisable par certaine fonction CM_xxx
Reserved As Long 'réservéEnd Type''typedef struct _STORAGE_DEVICE_NUMBER {'
// The FILE_DEVICE_XXX type for this device.'
DEVICE_TYPE DeviceT'
// The number of this device'
// If the device is partitionable, the partition number of the device.'
// Otherwise -1'
PartitionN'} STORAGE_DEVICE_NUMBER, *PSTORAGE_DEVICE_NUMBER;Private Type STORAGE_DEVICE_NUMBER
dwDeviceType As Long
dwDeviceNumber As Long
dwPartitionNumber As LongEnd Type
'typedef enum
_PNP_VETO_TYPE {'
PNP_VetoTypeUnknown,
// Name is unspecified'
PNP_VetoLegacyDevice,
// Name is an Instance Path'
PNP_VetoPendingClose,
// Name is an Instance Path'
PNP_VetoWindowsApp,
// Name is a Module'
PNP_VetoWindowsService,
// Name is a Service'
PNP_VetoOutstandingOpen,
// Name is an Instance Path'
PNP_VetoDevice,
// Name is an Instance Path'
PNP_VetoDriver,
// Name is a Driver Service Name'
PNP_VetoIllegalDeviceRequest,
// Name is an Instance Path'
PNP_VetoInsufficientPower,
// Name is unspecified'
PNP_VetoNonDisableable,
// Name is an Instance Path'
PNP_VetoLegacyDriver,
// Name is a Service'
PNP_VetoInsufficientRights
// Name is unspecified'}
PNP_VETO_TYPE, *PPNP_VETO_TYPE;
Private Enum PNP_VETO_TYPE
PNP_VetoTypeUnknown
PNP_VetoLegacyDevice
PNP_VetoPendingClose
PNP_VetoWindowsApp
PNP_VetoWindowsService
PNP_VetoOutstandingOpen
PNP_VetoDevice
PNP_VetoDriver
PNP_VetoIllegalDeviceRequest
PNP_VetoInsufficientPower
PNP_VetoNonDisableable
PNP_VetoLegacyDriver
PNP_VetoInsufficientRightsEnd Enum'Private Const DIGCF_DEFAULT = &H1
' only valid with DIGCF_DEVICEINTERFACEPrivate Const DIGCF_PRESENT = &H2'Private Const DIGCF_ALLCLASSES = &H4'Private Const DIGCF_PROFILE = &H8Private Const DIGCF_DEVICEINTERFACE = &H10Private Const GENERIC_READ = &H
'允许对设备进行读访问Private Const FILE_SHARE_READ = &H1
'允许读取共享Private Const OPEN_EXISTING = 3
'文件必须已经存在。由设备提出要求Private Const FILE_SHARE_WRITE = &H2
'允许对文件进行共享访问Private Const IOCTL_STORAGE_BASE As Long = &H2DPrivate Const METHOD_BUFFERED = 0Private Const FILE_ANY_ACCESS = 0
Private Declare Function SetupDiGetClassDevs Lib "setupapi.dll" Alias "SetupDiGetClassDevsA" (ByVal ClassGuid As Long, ByVal Enumerator As Long, ByVal HwndParent As Long, ByVal flags As Long) As LongPrivate Declare Function SetupDiEnumDeviceInterfaces Lib "setupapi.dll" (ByVal DeviceInfoSet As Long, ByVal DeviceInfoData As Long, ByRef InterfaceClassGuid As GUID, ByVal MemberIndex As Long, ByRef DeviceInterfaceData As SP_DEVICE_INTERFACE_DATA) As LongPrivate Declare Function SetupDiGetDeviceInterfaceDetail Lib "setupapi.dll" Alias "SetupDiGetDeviceInterfaceDetailA" (ByVal DeviceInfoSet As Long, ByRef DeviceInterfaceData As SP_DEVICE_INTERFACE_DATA, DeviceInterfaceDetailData As Any, ByVal DeviceInterfaceDetailDataSize As Long, ByRef RequiredSize As Long, DeviceInfoData As Any) As LongPrivate Declare Function SetupDiDestroyDeviceInfoList Lib "setupapi.dll" (ByVal DeviceInfoSet As Long) As LongPrivate Declare Function CreateFile Lib "kernel32" Alias "CreateFileA" (ByVal lpFileName As String, ByVal dwDesiredAccess As Long, ByVal dwShareMode As Long, lpSecurityAttributes As Any, ByVal dwCreationDisposition As Long, ByVal dwFlagsAndAttributes As Long, ByVal hTemplateFile As Long) As LongPrivate Declare Function CM_Get_Parent Lib "cfgmgr32.dll" (pdwDevInst As Long, ByVal dwDevInst As Long, ByVal ulFlags As Long) As LongPrivate Declare Function CM_Request_Device_EjectW Lib "setupapi.dll" (ByVal dwDevInst As Long, ByVal pVetoType As Long, ByVal pszVetoName As String, ByVal ulNameLength As Long, ByVal ulFlags As Long) As LongPrivate Declare Function DeviceIoControl Lib "kernel32" (ByVal hDevice As Long, ByVal dwIoControlCode As Long, lpInBuffer As Any, ByVal nInBufferSize As Long, lpOutBuffer As Any, ByVal nOutBufferSize As Long, lpBytesReturned As Long, lpOverlapped As Any) As LongPrivate Declare Function CloseHandle Lib "kernel32" (ByVal hObject As Long) As LongPrivate Declare Function GetDriveType Lib "kernel32" Alias "GetDriveTypeA" (ByVal nDrive As String) As LongPrivate Declare Function QueryDosDevice Lib "kernel32" Alias "QueryDosDeviceA" (ByVal lpDeviceName As String, ByVal lpTargetPath As String, ByVal ucchMax As Long) As LongPrivate Declare Sub Sleep Lib "kernel32" (ByVal dwMilliseconds As Long)Private Declare Sub CopyMemory Lib "kernel32" Alias "RtlMoveMemory" (Destination As Any, Source As Any, ByVal Length As Long)
Private Function CTL_CODE(ByVal lDeviceType As Long, ByVal lFunction As Long, ByVal lMethod As Long, ByVal lAccess As Long) As Long
CTL_CODE = (lDeviceType * 2 ^ 16&) Or (lAccess * 2 ^ 14&) Or (lFunction * 2 ^ 2) Or (lMethod)End Function
'获取设备属性信息，希望得到系统中所安装的各种固定的和可移动的硬盘、优盘和CD/DVD-ROM/R/W的接口类型、序列号、产品ID等信息。Private Function IOCTL_STORAGE_GET_DEVICE_NUMBER() As Long '2953344
IOCTL_STORAGE_GET_DEVICE_NUMBER = CTL_CODE(IOCTL_STORAGE_BASE, &H420, METHOD_BUFFERED, FILE_ANY_ACCESS)End Function
Private Function GetDrivesDevInstByDeviceNumber(ByVal lngDeviceNumber As Long, ByVal uDriveType As Long, ByVal szDosDeviceName As String) As Long
Dim objGuid As GUID, hDevInfo As Long, dwIndex As Long, lngRes As Long, dwSize As Long
Dim objSpdid As SP_DEVICE_INTERFACE_DATA, objSpdd As SP_DEVINFO_DATA, objPspdidd As SP_DEVICE_INTERFACE_DETAIL_DATA
Dim hDrive As Long, objSdn As STORAGE_DEVICE_NUMBER, dwBytesReturned As Long
Dim dwReturn As Long
With objGuid
.Data2 = &HB6BF
.Data3 = &H11D0&
.Data4(0) = &H94&
.Data4(1) = &HF2&
.Data4(2) = &H0&
.Data4(3) = &HA0&
.Data4(4) = &HC9&
.Data4(5) = &H1E&
.Data4(6) = &HFB&
.Data4(7) = &H8B&
Select Case uDriveType
If InStr(szDosDeviceName, "/Floppy") Then
.Data1 = &H53F56311
.Data1 = &H53F56307
.Data1 = &H53F56307
.Data1 = &H53F56308
End Select
'Get device interface info set handle for all devices attached to system
hDevInfo = SetupDiGetClassDevs(VarPtr(objGuid), 0, 0, DIGCF_PRESENT Or DIGCF_DEVICEINTERFACE)
If hDevInfo = -1 Then
GetDrivesDevInstByDeviceNumber = 0
Exit Function
objSpdid.cbSize = Len(objSpdid)
Do While 1
lngRes = SetupDiEnumDeviceInterfaces(hDevInfo, 0, objGuid, dwIndex, objSpdid)
If lngRes = 0 Then Exit Do
dwSize = 0
Call SetupDiGetDeviceInterfaceDetail(hDevInfo, objSpdid, ByVal 0&, 0, dwSize, ByVal 0&)
If dwSize && 0 And dwSize &= 1024 Then
objPspdidd.cbSize = 5 'Len(objPspdidd) '这里十分注意这里必须是5不能用'Len(objPspdidd)
objSpdd.cbSize = Len(objSpdd)
lngRes = SetupDiGetDeviceInterfaceDetail(hDevInfo, objSpdid, objPspdidd, ByVal dwSize, dwReturn, objSpdd)
If lngRes & 0 Then
hDrive = CreateFile(objPspdidd.strDevicePath, 0, FILE_SHARE_READ Or FILE_SHARE_WRITE, ByVal 0&, OPEN_EXISTING, 0, 0)
If hDrive && -1 Then
'获取设备号
lngRes = DeviceIoControl(hDrive, IOCTL_STORAGE_GET_DEVICE_NUMBER, ByVal 0&, 0, objSdn, Len(objSdn), dwBytesReturned, ByVal 0&)
If lngRes Then
'match the given device number with the one of the current device
If lngDeviceNumber = objSdn.dwDeviceNumber Then
Call CloseHandle(hDrive)
SetupDiDestroyDeviceInfoList hDevInfo
GetDrivesDevInstByDeviceNumber = objSpdd.DevInst
Exit Function
Call CloseHandle(hDrive)
dwIndex = dwIndex + 1
Call SetupDiDestroyDeviceInfoList(hDevInfo)End Function
'************************************************************************************************'参数为szDosDeviceName为USB的路径格式为"//./" & drive & ":"形式，blnIsShowNote参数是是否显示'消息窗体的着用，这里需要注意的是在9X下只能把blnIsShowNote参数设置为FALSE'************************************************************************************************Public Function RemoveUsbDrive(ByVal szDosDeviceName As String, ByVal blnIsShowNote As Boolean) As Boolean
Dim strDrive As String, dwDeviceNumber As Long, hVolume As Long, objSdn As STORAGE_DEVICE_NUMBER, dwBytesReturned As Long
Dim lngRes As Long, uDriveType As Long, strDosDriveName As String, hDevInst As Long, uType As PNP_VETO_TYPE
Dim strVetoName As String, blnSuccess As Boolean, dwDevInstParent As Long, i As Integer, pVetoType As Long
'获取USB所在盘符
strDrive = Right(szDosDeviceName, 2)
dwDeviceNumber = -1
hVolume = CreateFile(szDosDeviceName, 0, FILE_SHARE_READ Or FILE_SHARE_WRITE, ByVal 0&, OPEN_EXISTING, 0, 0)
If hVolume = -1 Then
RemoveUsbDrive = False
Exit Function
'获取设备号
lngRes = DeviceIoControl(hVolume, IOCTL_STORAGE_GET_DEVICE_NUMBER, ByVal 0&, 0, objSdn, Len(objSdn), dwBytesReturned, ByVal 0&)
If lngRes Then
dwDeviceNumber = objSdn.dwDeviceNumber
Call CloseHandle(hVolume)
If dwDeviceNumber = -1 Then
RemoveUsbDrive = False
Exit Function
'获取驱动器类型
uDriveType = GetDriveType(strDrive)
strDosDriveName = String(280, Chr(0))
'get the dos device name (like /device/floppy0) to decide if it's a floppy or not - who knows a better way?
lngRes = QueryDosDevice(strDrive, strDosDriveName, 280)
strDosDriveName = Left(strDosDriveName, InStr(strDosDriveName, Chr(0)) - 1)
If lngRes = 0 Then
RemoveUsbDrive = False
Exit Function
'get the device instance handle of the storage volume by means of a SetupDi enum and matching the device number
hDevInst = GetDrivesDevInstByDeviceNumber(dwDeviceNumber, uDriveType, strDosDriveName)
If hDevInst = 0 Then
RemoveUsbDrive = False
Exit Function
strVetoName = String(260, Chr(0))
'get drives's parent, e.g. the USB bridge, the SATA port, an IDE channel with two drives!
lngRes = CM_Get_Parent(dwDevInstParent, hDevInst, 0)
For i = 0 To 3
'卸载UB设备
If blnIsShowNote Then
lngRes = CM_Request_Device_EjectW(dwDevInstParent, ByVal VarPtr(pVetoType), vbNullString, 0, 0)
lngRes = CM_Request_Device_EjectW(dwDevInstParent, uType, strVetoName, 260, 0)
If lngRes = 0 And uType = PNP_VetoTypeUnknown Then
blnSuccess = True
RemoveUsbDrive = blnSuccessEnd Function
没有更多推荐了，}
在采购PEB2085P-VB2.0进货过程中，您使用搜索有什么问题和建议？
免责声明：以上所展示的PEB2085P-VB2.0信息由会员自行提供，PEB2085P-VB2.0内容的真实性、准确性和合法性由发布会员负责。捷配网不承担任何责任。
友情提醒：为规避购买PEB2085P-VB2.0产品风险，建议您在购买PEB2085P-VB2.0相关产品前务必确认供应商资质及产品质量。推荐使用"DZSC委托交易服务"，买卖都安全。VB 卸载USB设备/解锁文件
这次索性贴完整源码,希望能对大家有所帮助.
frmMain.frm
VERSION 5.00Begin VB.Form frmMain
BorderStyle
'Fixed Single
"Usb卸载程序"
ClientHeight
ClientLeft
ClientWidth
ScaleHeight
ScaleWidth
StartUpPosition =
Begin VB.CommandButton cmdAbout
"关于(&A)"
Begin VB.CommandButton cmdExit
"退出(&C)"
Begin VB.CommandButton cmdUnLoad
"卸载(&U)"
Begin VB.TextBox txtUsbDrive
Begin VB.Label lblMsg
"输入USB盘符:"
EndEndAttribute VB_Name = "frmMain"Attribute VB_GlobalNameSpace = FalseAttribute VB_Creatable = FalseAttribute VB_PredeclaredId = TrueAttribute VB_Exposed = FalsePrivate Sub cmdAbout_Click()
Shell "explorer /s , "
MsgBox "欢迎大家使用我编写的卸载USB程序,如果您在使用中发现有什么BUG或者是好的建" & vbNewLine & "议可以到我的博客上留言反映情况。地址是: ", vbInformation, "关于"End Sub
Private Sub cmdExit_Click()
Unload MeEnd Sub
Private Sub cmdUnLoad_Click()
Dim lngLenPath As Long, blnIsUsb As Boolean, strPath As String
lngLenPath = Len(txtUsbDrive.Text)
If lngLenPath &= 3 And Dir(txtUsbDrive.Text, 1 Or 2 Or 4 Or vbDirectory) && "" Then
If lngLenPath = 2 Then
If GetDriveBusType(txtUsbDrive.Text) && "Usb" Then
MsgBox "只能解锁USB设备分区！！", vbCritical, "错误"
txtUsbDrive.SetFocus
strPath = txtUsbDrive.Text & "/"
ElseIf lngLenPath = 1 Then
If GetDriveBusType(txtUsbDrive.Text & ":") && "Usb" Then
MsgBox "只能解锁USB设备分区！！", vbCritical, "错误"
txtUsbDrive.SetFocus
strPath = txtUsbDrive.Text & ":/"
If GetDriveBusType(Left(txtUsbDrive.Text, 2)) && "Usb" Then
MsgBox "只能解锁USB设备分区！！", vbCritical, "错误"
txtUsbDrive.SetFocus
strPath = txtUsbDrive.Text
blnIsUsb = True
MsgBox "您输入的USB盘符不要求！！", vbCritical, "错误"
txtUsbDrive.SetFocus
Me.cmdUnLoad.Enabled = False
Me.cmdExit.Enabled = False
'这里只检测本进程因为在获取驱动器类型的时候会打开一个句柄但是WINDOWS没有自己关闭所以用这个来
'解除锁定，当然你也可以使用CloseLoackFiles函数来检测所有进程
If CloseLockFileHandle(Left(strPath, 2), GetCurrentProcessId) Then
If blnIsUsb Then
If RemoveUsbDrive("//./" & Left(strPath, 2), True) Then
MsgBox "卸载UBS设备成功！！", , "提示"
MsgBox "但卸载UBS设备失败！！", vbCritical, "提示"
MsgBox "发现有锁定文件还没解锁！！", vbCritical, "提示"
Me.cmdUnLoad.Enabled = True
Me.cmdExit.Enabled = TrueEnd Sub
modGetDriveType.bas
Attribute VB_Name = "modGetDriveType"Option Explicit'****************************************************************************************************************'此模块来自于网络'****************************************************************************************************************'判断驱动器的类型
Private Declare Function GetDriveType Lib "kernel32" Alias "GetDriveTypeA" (ByVal nDrive As String) As Long
Private Const DRIVE_UNKNOWN = 0
'驱动器类型无法确定Private Const DRIVE_NO_ROOT_DIR = 1
'驱动器根目录不存在Private Const DRIVE_REMOVABLE = 2
'软盘驱动器或可移动盘Private Const DRIVE_FIXED = 3
'硬盘驱动器Private Const DRIVE_REMOTE = 4
'Network 驱动器Private Const DRIVE_CDROM = 5
'光盘驱动器Private Const DRIVE_RAMDISK = 6
'RAM 存储器
'****************************************************************************************************************
' CreateFile获取设备句柄
'参数'lpFileName
文件名'dwDesiredAccess
访问方式'dwShareMode
共享方式'ATTRIBUTES lpSecurityAttributes
安全描述符指针'dwCreationDisposition
创建方式'dwFlagsAndAttributes
文件属性及标志' hTemplateFile
模板文件的句柄
'CreateFile这个函数用处很多，这里我们用它「打开」设备驱动程序，得到设备的句柄。'操作完成後用CloseHandle关闭设备句柄。'与普通文件名有所不同，设备驱动的「文件名」形式固定为「//./DeviceName」(注意在C程序中该字符串写法为「////.//DeviceName」)'DeviceName必须与设备驱动程序内规定的设备名称一致。'一般地，调用CreateFile获得设备句柄时，访问方式参数设置为0或GENERIC_READ|GENERIC_WRITE'共享方式参数设置为FILE_SHARE_READ|FILE_SHARE_WRITE，创建方式参数设置为OPEN_EXISTING，其它参数设置为0或NULL。
Private Declare Function CreateFile Lib "kernel32" Alias "CreateFileA" (ByVal lpFileName As String, ByVal dwDesiredAccess As Long, ByVal dwShareMode As Long, lpSecurityAttributes As Any, ByVal dwCreationDisposition As Long, ByVal dwFlagsAndAttributes As Long, ByVal hTemplateFile As Long) As LongPrivate Declare Function CloseHandle Lib "kernel32" (ByVal hObject As Long) As Long
Private Const GENERIC_READ = &H
'允许对设备进行读访问Private Const FILE_SHARE_READ = &H1
'允许读取共享Private Const OPEN_EXISTING = 3
'文件必须已经存在。由设备提出要求Private Const FILE_SHARE_WRITE = &H2
'允许对文件进行共享访问
'****************************************************************************************************************
'DeviceIoControl说明
实现对设备的访问—获取信息，发送命令，交换数据等。
'参数'hDevice
设备句柄'dwIoControlCode
控制码'lpInBuffer
输入数据缓冲区指针'nInBufferSize
输入数据缓冲区长度'lpOutBuffer
输出数据缓冲区指针'nOutBufferSize
输出数据缓冲区长度'lpBytesReturned
输出数据实际长度单元长度'lpOverlapped
重叠操作结构指针Private Declare Function DeviceIoControl Lib "kernel32" (ByVal hDevice As Long, ByVal dwIoControlCode As Long, lpInBuffer As Any, ByVal nInBufferSize As Long, lpOutBuffer As Any, ByVal nOutBufferSize As Long, lpBytesReturned As Long, lpOverlapped As OVERLAPPED) As Long
Private Type SECURITY_ATTRIBUTES
nLength As Long
'结构体的大小
lpSecurityDescriptor As Long
'安全描述符（一个C-Style的字符串）。
bInheritHandle As Long
'所创建出来的东西是可以被其他的子进程使用的End Type
'查询存储设备还是适配器属性Private Enum STORAGE_PROPERTY_ID
StorageDeviceProperty = 0
'查询设备属性
StorageAdapterProperty
'查询适配器属性End Enum
'查询存储设备属性的类型Private Enum STORAGE_QUERY_TYPE
PropertyStandardQuery = 0
PropertyExistsQuery
'测试是否支持
PropertyMaskQuery
'读取指定的描述
PropertyQueryMaxDefined
'验证数据End Enum
'查询属性输入的数据结构Private Type STORAGE_PROPERTY_QUERY
PropertyId As STORAGE_PROPERTY_ID
'设备/适配器
QueryType As STORAGE_QUERY_TYPE
AdditionalParameters(0) As Byte
'额外的数据(仅定义了象徵性的1个字节)End Type
Private Type OVERLAPPED
Internal As Long
'保留给操作系统使用。用于保存系统状态，当GetOverLappedRseult的返回值中没有设置ERROR_IO_PENDING时，本域为有效。
InternalHigh As Long
'成员保留给操作系统使用。用于保存异步传输数据的长度。当GetOverLappedRseult返回TRUE时，本域为有效。
offset As Long
'指定开始进行异步传输的文件的一个位置。该位置是距离文件开头处的偏移值。在调用ReadFile或WriteFile之前，必须设置此分量。
OffsetHigh As Long
'指定开始异步传输处的字节偏移的高位字部分。
hEvent As Long
'指向一个事件的句柄，当传输完后将其设置为信号状态。End Type
'存储设备的总线类型Private Enum STORAGE_BUS_TYPE
BusTypeUnknown = 0
BusTypeScsi
BusTypeAtapi
BusTypeAta
BusType1394
BusTypeSsa
BusTypeFibre
BusTypeUsb
BusTypeRAID
BusTypeMaxReserved = &H7FEnd Enum
'查询属性输出的数据结构Private Type STORAGE_DEVICE_DESCRIPTOR
Version As Long
Size As Long
DeviceType As Byte
DeviceTypeModifier As Byte
'SCSI-2额外的设备类型
RemovableMedia As Byte
'是否可移动
CommandQueueing As Byte
'是否支持命令队列
VendorIdOffset As Long
'厂家设定值的偏移
ProductIdOffset As Long
'产品ID的偏移
ProductRevisionOffset As Long
'产品版本的偏移
SerialNumberOffset As Long
'序列号的偏移
BusType As STORAGE_BUS_TYPE
RawPropertiesLength As Long
'额外的属性数据长度
RawDeviceProperties(0) As Byte
'额外的属性数据(仅定义了象徵性的1个字节)End Type
'计算控制码
IOCTL_STORAGE_QUERY_PROPERTYPrivate Const IOCTL_STORAGE_BASE As Long = &H2DPrivate Const METHOD_BUFFERED = 0Private Const FILE_ANY_ACCESS = 0
'获取磁盘属性Private Function GetDisksProperty(ByVal hDevice As Long, utDevDesc As STORAGE_DEVICE_DESCRIPTOR) As Boolean
Dim ut As OVERLAPPED
Dim utQuery As STORAGE_PROPERTY_QUERY
Dim lOutBytes As Long
With utQuery
.PropertyId = StorageDeviceProperty
.QueryType = PropertyStandardQuery
GetDisksProperty = DeviceIoControl(hDevice, IOCTL_STORAGE_QUERY_PROPERTY, utQuery, LenB(utQuery), utDevDesc, LenB(utDevDesc), lOutBytes, ut)End Function
Private Function CTL_CODE(ByVal lDeviceType As Long, ByVal lFunction As Long, ByVal lMethod As Long, ByVal lAccess As Long) As Long
CTL_CODE = (lDeviceType * 2 ^ 16&) Or (lAccess * 2 ^ 14&) Or (lFunction * 2 ^ 2) Or (lMethod)End Function
'获取设备属性信息，希望得到系统中所安装的各种固定的和可移动的硬盘、优盘和CD/DVD-ROM/R/W的接口类型、序列号、产品ID等信息。Private Function IOCTL_STORAGE_QUERY_PROPERTY() As Long
IOCTL_STORAGE_QUERY_PROPERTY = CTL_CODE(IOCTL_STORAGE_BASE, &H500, METHOD_BUFFERED, FILE_ANY_ACCESS)End Function
'获取驱动器总线类型Public Function GetDriveBusType(ByVal strDriveLetter As String) As String
Dim hDevice As Long
Dim utDevDesc As STORAGE_DEVICE_DESCRIPTOR
hDevice = CreateFile("//./" & strDriveLetter, GENERIC_READ, FILE_SHARE_READ Or FILE_SHARE_WRITE, ByVal 0&, OPEN_EXISTING, 0, 0)
If hDevice && -1 Then
utDevDesc.Size = LenB(utDevDesc)
Call GetDisksProperty(hDevice, utDevDesc)
Select Case utDevDesc.BusType
Case BusType1394
GetDriveBusType = "1394"
Case BusTypeAta
GetDriveBusType = "Ata"
Case BusTypeAtapi
GetDriveBusType = "Atapi"
Case BusTypeFibre
GetDriveBusType = "Fibre"
Case BusTypeRAID
GetDriveBusType = "RAID"
Case BusTypeScsi
GetDriveBusType = "Scsi"
Case BusTypeSsa
GetDriveBusType = "Ssa"
Case BusTypeUsb
GetDriveBusType = "Usb"
Case BusTypeUnknown
GetDriveBusType = "未知"
End Select
Call CloseHandle(hDevice)
End IfEnd Function
modLockFileInfo.bas
Attribute VB_Name = "modLockFileInfo"Option Explicit
Private Declare Function NtQueryInformationProcess Lib "NTDLL.DLL" (ByVal ProcessHandle As Long, _
ByVal ProcessInformationClass As PROCESSINFOCLASS, _
ByVal ProcessInformation As Long, _
ByVal ProcessInformationLength As Long, _
ByRef ReturnLength As Long) As Long
Private Enum PROCESSINFOCLASS
ProcessBasicInformation = 0
ProcessQuotaLimits
ProcessIoCounters
ProcessVmCounters
ProcessTimes
ProcessBasePriority
ProcessRaisePriority
ProcessDebugPort
ProcessExceptionPort
ProcessAccessToken
ProcessLdtInformation
ProcessLdtSize
ProcessDefaultHardErrorMode
ProcessIoPortHandlers
ProcessPooledUsageAndLimits
ProcessWorkingSetWatch
ProcessUserModeIOPL
ProcessEnableAlignmentFaultFixup
ProcessPriorityClass
ProcessWx86Information
ProcessHandleCount
ProcessAffinityMask
ProcessPriorityBoost
ProcessDeviceMap
ProcessSessionInformation
ProcessForegroundInformation
ProcessWow64Information
ProcessImageFileName
ProcessLUIDDeviceMapsEnabled
ProcessBreakOnTermination
ProcessDebugObjectHandle
ProcessDebugFlags
ProcessHandleTracing
ProcessIoPriority
ProcessExecuteFlags
ProcessResourceManagement
ProcessCookie
ProcessImageInformation
MaxProcessInfoClassEnd Enum
Private Type PROCESS_BASIC_INFORMATION
ExitStatus As Long 'NTSTATUS
PebBaseAddress As Long 'PPEB
AffinityMask As Long 'ULONG_PTR
BasePriority As Long 'KPRIORITY
UniqueProcessId As Long 'ULONG_PTR
InheritedFromUniqueProcessId As Long 'ULONG_PTREnd Type
Private Type FILE_NAME_INFORMATION
FileNameLength As Long
FileName(3) As ByteEnd Type
Private Type NM_INFO
Info As FILE_NAME_INFORMATION
strName(259) As ByteEnd Type
Private Enum FileInformationClass
FileDirectoryInformation = 1
FileFullDirectoryInformation = 2
FileBothDirectoryInformation = 3
FileBasicInformation = 4
FileStandardInformation = 5
FileInternalInformation = 6
FileEaInformation = 7
FileAccessInformation = 8
FileNameInformation = 9
FileRenameInformation = 10
FileLinkInformation = 11
FileNamesInformation = 12
FileDispositionInformation = 13
FilePositionInformation = 14
FileFullEaInformation = 15
FileModeInformation = 16
FileAlignmentInformation = 17
FileAllInformation = 18
FileAllocationInformation = 19
FileEndOfFileInformation = 20
FileAlternateNameInformation = 21
FileStreamInformation = 22
FilePipeInformation = 23
FilePipeLocalInformation = 24
FilePipeRemoteInformation = 25
FileMailslotQueryInformation = 26
FileMailslotSetInformation = 27
FileCompressionInformation = 28
FileObjectIdInformation = 29
FileCompletionInformation = 30
FileMoveClusterInformation = 31
FileQuotaInformation = 32
FileReparsePointInformation = 33
FileNetworkOpenInformation = 34
FileAttributeTagInformation = 35
FileTrackingInformation = 36
FileMaximumInformationEnd Enum
Private Declare Function NtQuerySystemInformation Lib "NTDLL.DLL" (ByVal SystemInformationClass As SYSTEM_INFORMATION_CLASS, _
ByVal pSystemInformation As Long, _
ByVal SystemInformationLength As Long, _
ByRef ReturnLength As Long) As Long
Private Enum SYSTEM_INFORMATION_CLASS
SystemBasicInformation
SystemProcessorInformation
'// obsolete...delete
SystemPerformanceInformation
SystemTimeOfDayInformation
SystemPathInformation
SystemProcessInformation
SystemCallCountInformation
SystemDeviceInformation
SystemProcessorPerformanceInformation
SystemFlagsInformation
SystemCallTimeInformation
SystemModuleInformation
SystemLocksInformation
SystemStackTraceInformation
SystemPagedPoolInformation
SystemNonPagedPoolInformation
SystemHandleInformation
SystemObjectInformation
SystemPageFileInformation
SystemVdmInstemulInformation
SystemVdmBopInformation
SystemFileCacheInformation
SystemPoolTagInformation
SystemInterruptInformation
SystemDpcBehaviorInformation
SystemFullMemoryInformation
SystemLoadGdiDriverInformation
SystemUnloadGdiDriverInformation
SystemTimeAdjustmentInformation
SystemSummaryMemoryInformation
SystemMirrorMemoryInformation
SystemPerformanceTraceInformation
SystemObsolete0
SystemExceptionInformation
SystemCrashDumpStateInformation
SystemKernelDebuggerInformation
SystemContextSwitchInformation
SystemRegistryQuotaInformation
SystemExtendServiceTableInformation
SystemPrioritySeperation
SystemVerifierAddDriverInformation
SystemVerifierRemoveDriverInformation
SystemProcessorIdleInformation
SystemLegacyDriverInformation
SystemCurrentTimeZoneInformation
SystemLookasideInformation
SystemTimeSlipNotification
SystemSessionCreate
SystemSessionDetach
SystemSessionInformation
SystemRangeStartInformation
SystemVerifierInformation
SystemVerifierThunkExtend
SystemSessionProcessInformation
SystemLoadGdiDriverInSystemSpace
SystemNumaProcessorMap
SystemPrefetcherInformation
SystemExtendedProcessInformation
SystemRecommendedSharedDataAlignment
SystemComPlusPackage
SystemNumaAvailableMemory
SystemProcessorPowerInformation
SystemEmulationBasicInformation
SystemEmulationProcessorInformation
SystemExtendedHandleInformation
SystemLostDelayedWriteInformation
SystemBigPoolInformation
SystemSessionPoolTagInformation
SystemSessionMappedViewInformation
SystemHotpatchInformation
SystemObjectSecurityMode
SystemWatchdogTimerHandler
SystemWatchdogTimerInformation
SystemLogicalProcessorInformation
SystemWow64SharedInformation
SystemRegisterFirmwareTableInformationHandler
SystemFirmwareTableInformation
SystemModuleInformationEx
SystemVerifierTriageInformation
SystemSuperfetchInformation
SystemMemoryListInformation
SystemFileCacheInformationEx
MaxSystemInfoClass
'// MaxSystemInfoClass should always be the last enumEnd Enum
Private Type SYSTEM_HANDLE
UniqueProcessId As Integer
CreatorBackTraceIndex As Integer
ObjectTypeIndex As Byte
HandleAttributes As Byte
HandleValue As Integer
pObject As Long
GrantedAccess As LongEnd Type
Private Const STATUS_INFO_LENGTH_MISMATCH = &HC0000004
Private Enum SYSTEM_HANDLE_TYPE
OB_TYPE_UNKNOWN = 0
OB_TYPE_TYPE = 1
OB_TYPE_DIRECTORY
OB_TYPE_SYMBOLIC_LINK
OB_TYPE_TOKEN
OB_TYPE_PROCESS
OB_TYPE_THREAD
OB_TYPE_UNKNOWN_7
OB_TYPE_EVENT
OB_TYPE_EVENT_PAIR
OB_TYPE_MUTANT
OB_TYPE_UNKNOWN_11
OB_TYPE_SEMAPHORE
OB_TYPE_TIMER
OB_TYPE_PROFILE
OB_TYPE_WINDOW_STATION
OB_TYPE_DESKTOP
OB_TYPE_SECTION
OB_TYPE_KEY
OB_TYPE_PORT
OB_TYPE_WAITABLE_PORT
OB_TYPE_UNKNOWN_21
OB_TYPE_UNKNOWN_22
OB_TYPE_UNKNOWN_23
OB_TYPE_UNKNOWN_24
OB_TYPE_IO_COMPLETION
OB_TYPE_FILEEnd Enum
'typedef struct _SYSTEM_HANDLE_INFORMATION'{ '
SYSTEM_HANDLE
aSH[];'} SYSTEM_HANDLE_INFORMATION, *PSYSTEM_HANDLE_INFORMATION;
Private Type SYSTEM_HANDLE_INFORMATION
uCount As Long
aSH() As SYSTEM_HANDLEEnd Type
Private Declare Function NtDuplicateObject Lib "NTDLL.DLL" (ByVal SourceProcessHandle As Long, _
ByVal SourceHandle As Long, _
ByVal TargetProcessHandle As Long, _
ByRef TargetHandle As Long, _
ByVal DesiredAccess As Long, _
ByVal HandleAttributes As Long, _
ByVal Options As Long) As Long
Private Const DUPLICATE_CLOSE_SOURCE = &H1
Private Const DUPLICATE_SAME_ACCESS = &H2
Private Const DUPLICATE_SAME_ATTRIBUTES = &H4
Private Declare Function NtOpenProcess Lib "NTDLL.DLL" (ByRef ProcessHandle As Long, _
ByVal AccessMask As Long, _
ByRef ObjectAttributes As OBJECT_ATTRIBUTES, _
ByRef ClientID As CLIENT_ID) As Long
Private Type OBJECT_ATTRIBUTES
Length As Long
RootDirectory As Long
ObjectName As Long
Attributes As Long
SecurityDescriptor As Long
SecurityQualityOfService As LongEnd Type
Private Type CLIENT_ID
UniqueProcess As Long
UniqueThread
As LongEnd Type
Private Type IO_STATUS_BLOCK
Status As Long
uInformation As LongEnd Type
Private Const PROCESS_CREATE_THREAD = &H2
Private Const PROCESS_VM_WRITE = &H20Private Const PROCESS_VM_OPERATION = &H8
Private Const PROCESS_QUERY_INFORMATION As Long = (&H400)
Private Const STANDARD_RIGHTS_REQUIRED As Long = &HF0000
Private Const SYNCHRONIZE As Long = &H100000
Private Const PROCESS_ALL_ACCESS As Long = (STANDARD_RIGHTS_REQUIRED Or SYNCHRONIZE Or &HFFF)
Private Const PROCESS_DUP_HANDLE As Long = (&H40)
Private Declare Function NtClose Lib "NTDLL.DLL" (ByVal ObjectHandle As Long) As Long
Private Declare Sub CopyMemory Lib "kernel32.dll" Alias "RtlMoveMemory" (ByRef Destination As Any, _
ByRef Source As Any, _
ByVal Length As Long)
Private Declare Function CreateFile Lib "kernel32" Alias "CreateFileA" (ByVal lpFileName As String, ByVal dwDesiredAccess As Long, ByVal dwShareMode As Long, lpSecurityAttributes As Any, ByVal dwCreationDisposition As Long, ByVal dwFlagsAndAttributes As Long, ByVal hTemplateFile As Long) As Long
'typedef struct _OBJECT_NAME_INFORMATION'{'
UNICODE_STRING
N'} OBJECT_NAME_INFORMATION, *POBJECT_NAME_INFORMATION;'typedef enum _OBJECT_INFORMATION_CLASS'{'
ObjectBasicInformation,
ObjectNameInformation,
ObjectTypeInformation,
ObjectAllTypesInformation,
ObjectHandleInformation
Y'} OBJECT_INFORMATION_CLASS;Private Enum OBJECT_INFORMATION_CLASS
ObjectBasicInformation = 0
ObjectNameInformation
ObjectTypeInformation
ObjectAllTypesInformation
ObjectHandleInformationEnd Enum''typedef struct _UNICODE_STRING'{'
USHORT MaximumL'
PWSTR B'} UNICODE_STRING, *PUNICODE_STRING;Private Type UNICODE_STRING
uLength As Integer
uMaximumLength As Integer
pBuffer(3) As ByteEnd Type
Private Type OBJECT_NAME_INFORMATION
pName As UNICODE_STRINGEnd TypePrivate Const STATUS_INFO_LEN_MISMATCH = &HC0000004Private Const HEAP_ZERO_MEMORY = &H8Public Declare Function GetCurrentProcessId Lib "kernel32" () As LongPrivate Declare Function GetCurrentProcess Lib "kernel32" () As LongPrivate Declare Function TerminateProcess Lib "kernel32" (ByVal hProcess As Long, ByVal uExitCode As Long) As LongPrivate Declare Function GetProcessHeap Lib "kernel32" () As LongPrivate Declare Function HeapFree Lib "kernel32" (ByVal hHeap As Long, ByVal dwFlags As Long, lpMem As Any) As LongPrivate Declare Function HeapReAlloc Lib "kernel32" (ByVal hHeap As Long, ByVal dwFlags As Long, lpMem As Any, ByVal dwBytes As Long) As LongPrivate Declare Function HeapAlloc Lib "kernel32" (ByVal hHeap As Long, ByVal dwFlags As Long, ByVal dwBytes As Long) As Long'Private Declare Function NtQueryObject Lib "NTDLL.DLL" (ByVal ObjectHandle As Long, _'
ByVal ObjectInformationClass As OBJECT_INFORMATION_CLASS, _'
ObjectInformation As Any, ByVal ObjectInformationLength As Long, _'
ReturnLength As Long) As LongPrivate Declare Function NtQueryObject Lib "NTDLL.DLL" (ByVal ObjectHandle As Long, _
ByVal ObjectInformationClass As OBJECT_INFORMATION_CLASS, _
ByVal ObjectInformation As Long, ByVal ObjectInformationLength As Long, _
ReturnLength As Long) As LongPrivate Declare Function lstrlenW Lib "kernel32" (ByVal lpString As Long) As LongPrivate Declare Function QueryDosDevice Lib "kernel32" Alias "QueryDosDeviceA" (ByVal lpDeviceName As String, ByVal lpTargetPath As String, ByVal ucchMax As Long) As LongPrivate Declare Function GetLogicalDriveStrings Lib "kernel32" Alias "GetLogicalDriveStringsA" (ByVal nBufferLength As Long, ByVal lpBuffer As String) As LongPrivate Declare Function lstrcpyW Lib "kernel32" (ByVal lpString1 As String, ByVal lpString2 As Long) As LongPublic Declare Function MessageBox Lib "user32" Alias "MessageBoxA" (ByVal hWnd As Long, ByVal lpText As String, ByVal lpCaption As String, ByVal wType As Long) As LongPrivate Declare Function CreateRemoteThread Lib "kernel32" (ByVal hProcess As Long, lpThreadAttributes As Any, ByVal dwStackSize As Long, lpStartAddress As Long, lpParameter As Any, ByVal dwCreationFlags As Long, lpThreadId As Long) As LongPrivate Declare Function WaitForSingleObject Lib "kernel32" (ByVal hHandle As Long, ByVal dwMilliseconds As Long) As Long'Private Declare Function CloseHandle Lib "kernel32" (ByVal hObject As Long) As LongPrivate Declare Function GetExitCodeThread Lib "kernel32" (ByVal hThread As Long, lpExitCode As Long) As LongPrivate Declare Function LoadLibrary Lib "kernel32" Alias "LoadLibraryA" (ByVal lpLibFileName As String) As LongPrivate Declare Function FreeLibrary Lib "kernel32" (ByVal hLibModule As Long) As LongPrivate Declare Function GetModuleHandle Lib "kernel32" Alias "GetModuleHandleA" (ByVal lpModuleName As String) As LongPrivate Declare Function GetProcAddress Lib "kernel32" (ByVal hModule As Long, ByVal lpProcName As String) As LongPrivate Declare Function TerminateThread Lib "kernel32" (ByVal hThread As Long, ByVal dwExitCode As Long) As LongPrivate Declare Function GetFileType Lib "kernel32" (ByVal hFile As Long) As LongPrivate Declare Function ReadProcessMemory Lib "kernel32" (ByVal hProcess As Long, lpBaseAddress As Any, lpBuffer As Any, ByVal nSize As Long, lpNumberOfBytesWritten As Long) As Long
Private Function NT_SUCCESS(ByVal nStatus As Long) As Boolean
NT_SUCCESS = (nStatus &= 0)End Function
Public Function GetFileFullPath(ByVal hFile As Long) As String
Dim hHeap As Long, dwSize As Long, objName As UNICODE_STRING, pName As Long
Dim ntStatus As Long, i As Long, lngNameSize As Long, strDrives As String, strArray() As String
Dim dwDriversSize As Long, strDrive As String, strTmp As String, strTemp As String
On Error GoTo ErrHandle
hHeap = GetProcessHeap
pName = HeapAlloc(hHeap, HEAP_ZERO_MEMORY, &H1000)
ntStatus = NtQueryObject(hFile, ObjectNameInformation, pName, &H1000, dwSize)
If (NT_SUCCESS(ntStatus)) Then
Do While (ntStatus = STATUS_INFO_LEN_MISMATCH)
pName = HeapReAlloc(hHeap, HEAP_ZERO_MEMORY, pName, &H1000 * i)
ntStatus = NtQueryObject(hFile, ObjectNameInformation, pName, &H1000, ByVal 0)
HeapFree hHeap, 0, pName
strTemp = String(512, Chr(0))
lstrcpyW strTemp, pName + Len(objName)
strTemp = StrConv(strTemp, vbFromUnicode)
strTemp = Left(strTemp, InStr(strTemp, Chr(0)) - 1)
strDrives = String(512, Chr(9))
dwDriversSize = GetLogicalDriveStrings(512, strDrives)
If dwDriversSize Then
strArray = Split(strDrives, Chr(0))
For i = 0 To UBound(strArray)
If strArray(i) && "" Then
strDrive = Left(strArray(i), 2)
strTmp = String(260, Chr(0))
Call QueryDosDevice(strDrive, strTmp, 256)
strTmp = Left(strTmp, InStr(strTmp, Chr(0)) - 1)
If InStr(LCase(strTemp), LCase(strTmp)) = 1 Then
GetFileFullPath = strDrive & Mid(strTemp, Len(strTmp) + 1, Len(strTemp) - Len(strTmp))
Exit Function
End IfErrHandle:End Function
Public Function CloseLockFileHandle(ByVal strFileName As String, ByVal dwProcessId As Long) As Boolean
Dim ntStatus As Long
Dim objCid As CLIENT_ID
Dim objOa As OBJECT_ATTRIBUTES
Dim lngHandles As Long
Dim i As Long
Dim objInfo As SYSTEM_HANDLE_INFORMATION, lngType As Long
Dim hProcess As Long, hProcessToDup As Long, hFileHandle As Long
Dim hFile As Long
'Dim objIo As IO_STATUS_BLOCK, objFn As FILE_NAME_INFORMATION, objN As NM_INFO
Dim bytBytes() As Byte, strSubPath As String, strTmp As String
Dim blnIsOk As Boolean
strSubPath = Mid(strFileName, 3, Len(strFileName) - 2)
hFile = CreateFile("NUL", &H, ByVal 0&, 3, 0, 0)
If hFile = -1 Then
CloseLockFileHandle = False
Exit Function
objOa.Length = Len(objOa)
objCid.UniqueProcess = dwProcessId
ntStatus = 0
Dim bytBuf() As Byte
Dim nSize As Long
ReDim bytBuf(nSize)
ntStatus = NtQuerySystemInformation(SystemHandleInformation, VarPtr(bytBuf(0)), nSize, 0&)
If (Not NT_SUCCESS(ntStatus)) Then
If (ntStatus && STATUS_INFO_LENGTH_MISMATCH) Then
Erase bytBuf
Exit Function
nSize = nSize * 2
ReDim bytBuf(nSize)
lngHandles = 0
CopyMemory objInfo.uCount, bytBuf(0), 4
lngHandles = objInfo.uCount
ReDim objInfo.aSH(lngHandles - 1)
Call CopyMemory(objInfo.aSH(0), bytBuf(4), Len(objInfo.aSH(0)) * lngHandles)
For i = 0 To lngHandles - 1
If objInfo.aSH(i).HandleValue = hFile And objInfo.aSH(i).UniqueProcessId = GetCurrentProcessId Then
lngType = objInfo.aSH(i).ObjectTypeIndex
NtClose hFile
blnIsOk = True
For i = 0 To lngHandles - 1
If objInfo.aSH(i).ObjectTypeIndex = lngType And objInfo.aSH(i).UniqueProcessId = dwProcessId Then
ntStatus = NtOpenProcess(hProcessToDup, PROCESS_DUP_HANDLE, objOa, objCid)
If hProcessToDup && 0 Then
ntStatus = NtDuplicateObject(hProcessToDup, objInfo.aSH(i).HandleValue, GetCurrentProcess, hFileHandle, 0, 0, DUPLICATE_SAME_ATTRIBUTES)
If (NT_SUCCESS(ntStatus)) Then
'这里如果直接调用NtQueryObject可能会挂起解决方法是用线程去处理当线程处理时间超过一定时间就把它干掉
'由于VB对多线程支持很差，其实应该说是对CreateThread支持很差，什么原因不要问我，相信网上也写有不少
'文件是关于它的,这里我选择了另一个函数也可以建立线程但是它是建立远程线程的，不过它却很稳定正好解决了
'我们这里的问题它就是CreateRemoteThread,^_^还记得我说过它很强大吧~~哈哈。
ntStatus = MyGetFileType(hFileHandle)
If ntStatus Then
strTmp = GetFileFullPath(hFileHandle)
NtClose hFileHandle
If InStr(LCase(strTmp), LCase(strFileName)) Then
If Not CloseRemoteHandle(dwProcessId, objInfo.aSH(i).HandleValue, strFileName) Then
blnIsOk = False
CloseLockFileHandle = blnIsOkEnd Function
'检测所有进程Public Function CloseLoackFiles(ByVal strFileName As String) As Boolean
Dim ntStatus As Long
Dim objCid As CLIENT_ID
Dim objOa As OBJECT_ATTRIBUTES
Dim lngHandles As Long
Dim i As Long
Dim objInfo As SYSTEM_HANDLE_INFORMATION, lngType As Long
Dim hProcess As Long, hProcessToDup As Long, hFileHandle As Long
Dim hFile As Long, blnIsOk As Boolean, strProcessName As String
'Dim objIo As IO_STATUS_BLOCK, objFn As FILE_NAME_INFORMATION, objN As NM_INFO
Dim bytBytes() As Byte, strSubPath As String, strTmp As String
strSubPath = Mid(strFileName, 3, Len(strFileName) - 2)
hFile = CreateFile("NUL", &H, ByVal 0&, 3, 0, 0)
If hFile = -1 Then
CloseLoackFiles = False
Exit Function
objOa.Length = Len(objOa)
ntStatus = 0
Dim bytBuf() As Byte
Dim nSize As Long
ReDim bytBuf(nSize)
ntStatus = NtQuerySystemInformation(SystemHandleInformation, VarPtr(bytBuf(0)), nSize, 0&)
If (Not NT_SUCCESS(ntStatus)) Then
If (ntStatus && STATUS_INFO_LENGTH_MISMATCH) Then
Erase bytBuf
Exit Function
nSize = nSize * 2
ReDim bytBuf(nSize)
lngHandles = 0
CopyMemory objInfo.uCount, bytBuf(0), 4
lngHandles = objInfo.uCount
ReDim objInfo.aSH(lngHandles - 1)
Call CopyMemory(objInfo.aSH(0), bytBuf(4), Len(objInfo.aSH(0)) * lngHandles)
For i = 0 To lngHandles - 1
If objInfo.aSH(i).HandleValue = hFile And objInfo.aSH(i).UniqueProcessId = GetCurrentProcessId Then
lngType = objInfo.aSH(i).ObjectTypeIndex
NtClose hFile
blnIsOk = True
For i = 0 To lngHandles - 1
If objInfo.aSH(i).ObjectTypeIndex = lngType Then
objCid.UniqueProcess = objInfo.aSH(i).UniqueProcessId
ntStatus = NtOpenProcess(hProcessToDup, PROCESS_DUP_HANDLE, objOa, objCid)
If hProcessToDup && 0 Then
ntStatus = NtDuplicateObject(hProcessToDup, objInfo.aSH(i).HandleValue, GetCurrentProcess, hFileHandle, 0, 0, DUPLICATE_SAME_ATTRIBUTES)
If (NT_SUCCESS(ntStatus)) Then
'这里如果直接调用NtQueryObject可能会挂起解决方法是用线程去处理当线程处理时间超过一定时间就把它干掉
'由于VB对多线程支持很差，其实应该说是对CreateThread支持很差，什么原因不要问我，相信网上也写有不少
'文件是关于它的,这里我选择了另一个函数也可以建立线程但是它是建立远程线程的，不过它却很稳定正好解决了
'我们这里的问题它就是CreateRemoteThread,^_^还记得我说过它很强大吧~~哈哈。
ntStatus = MyGetFileType(hFileHandle)
If ntStatus Then
strTmp = GetFileFullPath(hFileHandle)
strTmp = ""
NtClose hFileHandle
If InStr(LCase(strTmp), LCase(strFileName)) Then
If Not CloseRemoteHandle(objInfo.aSH(i).UniqueProcessId, objInfo.aSH(i).HandleValue, strTmp) Then
blnIsOk = False
CloseLoackFiles = blnIsOkEnd Function
Private Function GetProcessCommandLine(ByVal dwProcessId As Long) As String
Dim objCid As CLIENT_ID
Dim objOa As OBJECT_ATTRIBUTES
Dim ntStatus As Long, hKernel As Long, strName As String
Dim hProcess As Long, dwAddr As Long, dwRead As Long
objOa.Length = Len(objOa)
objCid.UniqueProcess = dwProcessId
ntStatus = NtOpenProcess(hProcess, &H10, objOa, objCid)
If hProcess = 0 Then
GetProcessCommandLine = ""
Exit Function
hKernel = GetModuleHandle("kernel32")
dwAddr = GetProcAddress(hKernel, "GetCommandLineA")
CopyMemory dwAddr, ByVal dwAddr + 1, 4
If ReadProcessMemory(hProcess, ByVal dwAddr, dwAddr, 4, dwRead) Then
strName = String(260, Chr(0))
If ReadProcessMemory(hProcess, ByVal dwAddr, ByVal strName, 260, dwRead) Then
strName = Left(strName, InStr(strName, Chr(0)) - 1)
NtClose hProcess
GetProcessCommandLine = strName
Exit Function
NtClose hProcessEnd Function
'解锁指定进程的锁定文件Public Function CloseRemoteHandle(ByVal dwProcessId, ByVal hHandle As Long, Optional ByVal strLockFile As String = "") As Boolean
Dim hMyProcess
As Long, hRemProcess As Long, blnResult As Long, hMyHandle As Long
Dim objCid As CLIENT_ID
Dim objOa As OBJECT_ATTRIBUTES
Dim ntStatus As Long, strProcessName As String, hProcess As Long, strMsg As String
objCid.UniqueProcess = dwProcessId
objOa.Length = Len(objOa)
hMyProcess = GetCurrentProcess()
ntStatus = NtOpenProcess(hRemProcess, PROCESS_DUP_HANDLE, objOa, objCid)
If hRemProcess Then
ntStatus = NtDuplicateObject(hRemProcess, hHandle, GetCurrentProcess, hMyHandle, 0, 0, DUPLICATE_CLOSE_SOURCE Or DUPLICATE_SAME_ACCESS)
If (NT_SUCCESS(ntStatus)) Then
'If DuplicateHandle(hRemProcess, hMyProcess, hHandle, hMyHandle, 0, 0, DUPLICATE_CLOSE_SOURCE Or DUPLICATE_SAME_ACCESS) Then
blnResult = NtClose(hMyHandle)
If blnResult &= 0 Then
strProcessName = GetProcessCommandLine(dwProcessId)
'If InStr(LCase(strProcessName), LCase(strLockFile)) Then
If InStr(LCase(strProcessName), "explorer.exe") = 0 And dwProcessId && GetCurrentProcessId Then
objCid.UniqueProcess = dwProcessId
ntStatus = NtOpenProcess(hProcess, 1, objOa, objCid)
If hProcess && 0 Then TerminateProcess hProcess, 0
Call NtClose(hRemProcess)
CloseRemoteHandle = blnResult &= 0End Function
'解锁指定进程的锁定文件Public Function CloseRemoteHandleEx(ByVal dwProcessId, ByVal hHandle As Long, Optional ByVal strLockFile As String = "") As Boolean
Dim hRemProcess As Long, hThread As Long, lngResult As Long, pfnThreadRtn As Long, hKernel As Long
Dim objCid As CLIENT_ID
Dim objOa As OBJECT_ATTRIBUTES, strMsg As String
Dim ntStatus As Long, strProcessName As String, hProcess As Long
objCid.UniqueProcess = dwProcessId
objOa.Length = Len(objOa)
ntStatus = NtOpenProcess(hRemProcess, PROCESS_QUERY_INFORMATION Or PROCESS_CREATE_THREAD Or PROCESS_VM_OPERATION Or PROCESS_VM_WRITE, objOa, objCid)'
hMyProcess = OpenProcess(PROCESS_QUERY_INFORMATION Or PROCESS_CREATE_THREAD Or PROCESS_VM_OPERATION Or PROCESS_VM_WRITE, 0, dwProcessId)
If hRemProcess = 0 Then
CloseRemoteHandleEx = False
Exit Function
hKernel = GetModuleHandle("kernel32")
If hKernel = 0 Then
CloseRemoteHandleEx = False
Exit Function
pfnThreadRtn = GetProcAddress(hKernel, "CloseHandle")
If pfnThreadRtn = 0 Then
FreeLibrary hKernel
CloseRemoteHandleEx = False
Exit Function
hThread = CreateRemoteThread(hRemProcess, ByVal 0&, 0&, ByVal pfnThreadRtn, ByVal hHandle, 0, 0&)
If hThread = 0 Then
FreeLibrary hKernel
CloseRemoteHandleEx = False
Exit Function
GetExitCodeThread hThread, lngResult
CloseRemoteHandleEx = CBool(lngResult)
strProcessName = GetProcessCommandLine(dwProcessId)
If InStr(strProcessName, strLockFile) Then
objCid.UniqueProcess = dwProcessId
ntStatus = NtOpenProcess(hProcess, 1, objOa, objCid)
If hProcess && 0 Then TerminateProcess hProcess, 0
NtClose hThread
NtClose hRemProcess
FreeLibrary hKernelEnd Function
Private Function MyGetFileType(ByVal hFile As Long) As Long
Dim hRemProcess As Long, hThread As Long, lngResult As Long, pfnThreadRtn As Long, hKernel As Long
Dim dwEax As Long, dwTimeOut As Long
hRemProcess = GetCurrentProcess
hKernel = GetModuleHandle("kernel32")
If hKernel = 0 Then
MyGetFileType = 0
Exit Function
pfnThreadRtn = GetProcAddress(hKernel, "GetFileType")
If pfnThreadRtn = 0 Then
FreeLibrary hKernel
MyGetFileType = 0
Exit Function
hThread = CreateRemoteThread(hRemProcess, ByVal 0&, 0&, ByVal pfnThreadRtn, ByVal hFile, 0, ByVal 0&)
dwEax = WaitForSingleObject(hThread, 100)
If dwEax = &H102 Then
Call GetExitCodeThread(hThread, dwTimeOut)
Call TerminateThread(hThread, dwTimeOut)
NtClose hThread
MyGetFileType = 0
Exit Function
If hThread = 0 Then
FreeLibrary hKernel
MyGetFileType = False
Exit Function
GetExitCodeThread hThread, lngResult
MyGetFileType = lngResult
NtClose hThread
NtClose hRemProcess
FreeLibrary hKernelEnd Function
modRemoveUsbDrive.bas
Attribute VB_Name = "modRemoveUsbDrive"Option Explicit'****************************************************************************************************************'此模块是通过转换C++代码而来'****************************************************************************************************************Private Type GUID
Data1 As Long
Data2 As Integer
Data3 As Integer
Data4(0 To 7) As ByteEnd Type
'typedef struct _SP_DEVICE_INTERFACE_DETAIL_DATA_A {'
DevicePath[ANYSIZE_ARRAY];'} SP_DEVICE_INTERFACE_DETAIL_DATA_A, *PSP_DEVICE_INTERFACE_DETAIL_DATA_A;Private Type SP_DEVICE_INTERFACE_DETAIL_DATA
cbSize As Long
strDevicePath As String * 260End Type
Private Type SP_DEVICE_INTERFACE_DATA
cbSize As Long 'taille de la structure en octets
InterfaceClassGuid As GUID 'GUID de la classe d'interface
flags As Long 'options
Reserved As Long 'réservéEnd Type
Private Type SP_DEVINFO_DATA
cbSize As Long 'taille de la structure en octets
ClassGuid As GUID 'GUID de la classe d'installation
DevInst As Long 'handle utilisable par certaine fonction CM_xxx
Reserved As Long 'réservéEnd Type''typedef struct _STORAGE_DEVICE_NUMBER {'
// The FILE_DEVICE_XXX type for this device.'
DEVICE_TYPE DeviceT'
// The number of this device'
// If the device is partitionable, the partition number of the device.'
// Otherwise -1'
PartitionN'} STORAGE_DEVICE_NUMBER, *PSTORAGE_DEVICE_NUMBER;Private Type STORAGE_DEVICE_NUMBER
dwDeviceType As Long
dwDeviceNumber As Long
dwPartitionNumber As LongEnd Type
'typedef enum
_PNP_VETO_TYPE {'
PNP_VetoTypeUnknown,
// Name is unspecified'
PNP_VetoLegacyDevice,
// Name is an Instance Path'
PNP_VetoPendingClose,
// Name is an Instance Path'
PNP_VetoWindowsApp,
// Name is a Module'
PNP_VetoWindowsService,
// Name is a Service'
PNP_VetoOutstandingOpen,
// Name is an Instance Path'
PNP_VetoDevice,
// Name is an Instance Path'
PNP_VetoDriver,
// Name is a Driver Service Name'
PNP_VetoIllegalDeviceRequest,
// Name is an Instance Path'
PNP_VetoInsufficientPower,
// Name is unspecified'
PNP_VetoNonDisableable,
// Name is an Instance Path'
PNP_VetoLegacyDriver,
// Name is a Service'
PNP_VetoInsufficientRights
// Name is unspecified'}
PNP_VETO_TYPE, *PPNP_VETO_TYPE;
Private Enum PNP_VETO_TYPE
PNP_VetoTypeUnknown
PNP_VetoLegacyDevice
PNP_VetoPendingClose
PNP_VetoWindowsApp
PNP_VetoWindowsService
PNP_VetoOutstandingOpen
PNP_VetoDevice
PNP_VetoDriver
PNP_VetoIllegalDeviceRequest
PNP_VetoInsufficientPower
PNP_VetoNonDisableable
PNP_VetoLegacyDriver
PNP_VetoInsufficientRightsEnd Enum'Private Const DIGCF_DEFAULT = &H1
' only valid with DIGCF_DEVICEINTERFACEPrivate Const DIGCF_PRESENT = &H2'Private Const DIGCF_ALLCLASSES = &H4'Private Const DIGCF_PROFILE = &H8Private Const DIGCF_DEVICEINTERFACE = &H10Private Const GENERIC_READ = &H
'允许对设备进行读访问Private Const FILE_SHARE_READ = &H1
'允许读取共享Private Const OPEN_EXISTING = 3
'文件必须已经存在。由设备提出要求Private Const FILE_SHARE_WRITE = &H2
'允许对文件进行共享访问Private Const IOCTL_STORAGE_BASE As Long = &H2DPrivate Const METHOD_BUFFERED = 0Private Const FILE_ANY_ACCESS = 0
Private Declare Function SetupDiGetClassDevs Lib "setupapi.dll" Alias "SetupDiGetClassDevsA" (ByVal ClassGuid As Long, ByVal Enumerator As Long, ByVal HwndParent As Long, ByVal flags As Long) As LongPrivate Declare Function SetupDiEnumDeviceInterfaces Lib "setupapi.dll" (ByVal DeviceInfoSet As Long, ByVal DeviceInfoData As Long, ByRef InterfaceClassGuid As GUID, ByVal MemberIndex As Long, ByRef DeviceInterfaceData As SP_DEVICE_INTERFACE_DATA) As LongPrivate Declare Function SetupDiGetDeviceInterfaceDetail Lib "setupapi.dll" Alias "SetupDiGetDeviceInterfaceDetailA" (ByVal DeviceInfoSet As Long, ByRef DeviceInterfaceData As SP_DEVICE_INTERFACE_DATA, DeviceInterfaceDetailData As Any, ByVal DeviceInterfaceDetailDataSize As Long, ByRef RequiredSize As Long, DeviceInfoData As Any) As LongPrivate Declare Function SetupDiDestroyDeviceInfoList Lib "setupapi.dll" (ByVal DeviceInfoSet As Long) As LongPrivate Declare Function CreateFile Lib "kernel32" Alias "CreateFileA" (ByVal lpFileName As String, ByVal dwDesiredAccess As Long, ByVal dwShareMode As Long, lpSecurityAttributes As Any, ByVal dwCreationDisposition As Long, ByVal dwFlagsAndAttributes As Long, ByVal hTemplateFile As Long) As LongPrivate Declare Function CM_Get_Parent Lib "cfgmgr32.dll" (pdwDevInst As Long, ByVal dwDevInst As Long, ByVal ulFlags As Long) As LongPrivate Declare Function CM_Request_Device_EjectW Lib "setupapi.dll" (ByVal dwDevInst As Long, ByVal pVetoType As Long, ByVal pszVetoName As String, ByVal ulNameLength As Long, ByVal ulFlags As Long) As LongPrivate Declare Function DeviceIoControl Lib "kernel32" (ByVal hDevice As Long, ByVal dwIoControlCode As Long, lpInBuffer As Any, ByVal nInBufferSize As Long, lpOutBuffer As Any, ByVal nOutBufferSize As Long, lpBytesReturned As Long, lpOverlapped As Any) As LongPrivate Declare Function CloseHandle Lib "kernel32" (ByVal hObject As Long) As LongPrivate Declare Function GetDriveType Lib "kernel32" Alias "GetDriveTypeA" (ByVal nDrive As String) As LongPrivate Declare Function QueryDosDevice Lib "kernel32" Alias "QueryDosDeviceA" (ByVal lpDeviceName As String, ByVal lpTargetPath As String, ByVal ucchMax As Long) As LongPrivate Declare Sub Sleep Lib "kernel32" (ByVal dwMilliseconds As Long)Private Declare Sub CopyMemory Lib "kernel32" Alias "RtlMoveMemory" (Destination As Any, Source As Any, ByVal Length As Long)
Private Function CTL_CODE(ByVal lDeviceType As Long, ByVal lFunction As Long, ByVal lMethod As Long, ByVal lAccess As Long) As Long
CTL_CODE = (lDeviceType * 2 ^ 16&) Or (lAccess * 2 ^ 14&) Or (lFunction * 2 ^ 2) Or (lMethod)End Function
'获取设备属性信息，希望得到系统中所安装的各种固定的和可移动的硬盘、优盘和CD/DVD-ROM/R/W的接口类型、序列号、产品ID等信息。Private Function IOCTL_STORAGE_GET_DEVICE_NUMBER() As Long '2953344
IOCTL_STORAGE_GET_DEVICE_NUMBER = CTL_CODE(IOCTL_STORAGE_BASE, &H420, METHOD_BUFFERED, FILE_ANY_ACCESS)End Function
Private Function GetDrivesDevInstByDeviceNumber(ByVal lngDeviceNumber As Long, ByVal uDriveType As Long, ByVal szDosDeviceName As String) As Long
Dim objGuid As GUID, hDevInfo As Long, dwIndex As Long, lngRes As Long, dwSize As Long
Dim objSpdid As SP_DEVICE_INTERFACE_DATA, objSpdd As SP_DEVINFO_DATA, objPspdidd As SP_DEVICE_INTERFACE_DETAIL_DATA
Dim hDrive As Long, objSdn As STORAGE_DEVICE_NUMBER, dwBytesReturned As Long
Dim dwReturn As Long
With objGuid
.Data2 = &HB6BF
.Data3 = &H11D0&
.Data4(0) = &H94&
.Data4(1) = &HF2&
.Data4(2) = &H0&
.Data4(3) = &HA0&
.Data4(4) = &HC9&
.Data4(5) = &H1E&
.Data4(6) = &HFB&
.Data4(7) = &H8B&
Select Case uDriveType
If InStr(szDosDeviceName, "/Floppy") Then
.Data1 = &H53F56311
.Data1 = &H53F56307
.Data1 = &H53F56307
.Data1 = &H53F56308
End Select
'Get device interface info set handle for all devices attached to system
hDevInfo = SetupDiGetClassDevs(VarPtr(objGuid), 0, 0, DIGCF_PRESENT Or DIGCF_DEVICEINTERFACE)
If hDevInfo = -1 Then
GetDrivesDevInstByDeviceNumber = 0
Exit Function
objSpdid.cbSize = Len(objSpdid)
Do While 1
lngRes = SetupDiEnumDeviceInterfaces(hDevInfo, 0, objGuid, dwIndex, objSpdid)
If lngRes = 0 Then Exit Do
dwSize = 0
Call SetupDiGetDeviceInterfaceDetail(hDevInfo, objSpdid, ByVal 0&, 0, dwSize, ByVal 0&)
If dwSize && 0 And dwSize &= 1024 Then
objPspdidd.cbSize = 5 'Len(objPspdidd) '这里十分注意这里必须是5不能用'Len(objPspdidd)
objSpdd.cbSize = Len(objSpdd)
lngRes = SetupDiGetDeviceInterfaceDetail(hDevInfo, objSpdid, objPspdidd, ByVal dwSize, dwReturn, objSpdd)
If lngRes & 0 Then
hDrive = CreateFile(objPspdidd.strDevicePath, 0, FILE_SHARE_READ Or FILE_SHARE_WRITE, ByVal 0&, OPEN_EXISTING, 0, 0)
If hDrive && -1 Then
'获取设备号
lngRes = DeviceIoControl(hDrive, IOCTL_STORAGE_GET_DEVICE_NUMBER, ByVal 0&, 0, objSdn, Len(objSdn), dwBytesReturned, ByVal 0&)
If lngRes Then
'match the given device number with the one of the current device
If lngDeviceNumber = objSdn.dwDeviceNumber Then
Call CloseHandle(hDrive)
SetupDiDestroyDeviceInfoList hDevInfo
GetDrivesDevInstByDeviceNumber = objSpdd.DevInst
Exit Function
Call CloseHandle(hDrive)
dwIndex = dwIndex + 1
Call SetupDiDestroyDeviceInfoList(hDevInfo)End Function
'************************************************************************************************'参数为szDosDeviceName为USB的路径格式为"//./" & drive & ":"形式，blnIsShowNote参数是是否显示'消息窗体的着用，这里需要注意的是在9X下只能把blnIsShowNote参数设置为FALSE'************************************************************************************************Public Function RemoveUsbDrive(ByVal szDosDeviceName As String, ByVal blnIsShowNote As Boolean) As Boolean
Dim strDrive As String, dwDeviceNumber As Long, hVolume As Long, objSdn As STORAGE_DEVICE_NUMBER, dwBytesReturned As Long
Dim lngRes As Long, uDriveType As Long, strDosDriveName As String, hDevInst As Long, uType As PNP_VETO_TYPE
Dim strVetoName As String, blnSuccess As Boolean, dwDevInstParent As Long, i As Integer, pVetoType As Long
'获取USB所在盘符
strDrive = Right(szDosDeviceName, 2)
dwDeviceNumber = -1
hVolume = CreateFile(szDosDeviceName, 0, FILE_SHARE_READ Or FILE_SHARE_WRITE, ByVal 0&, OPEN_EXISTING, 0, 0)
If hVolume = -1 Then
RemoveUsbDrive = False
Exit Function
'获取设备号
lngRes = DeviceIoControl(hVolume, IOCTL_STORAGE_GET_DEVICE_NUMBER, ByVal 0&, 0, objSdn, Len(objSdn), dwBytesReturned, ByVal 0&)
If lngRes Then
dwDeviceNumber = objSdn.dwDeviceNumber
Call CloseHandle(hVolume)
If dwDeviceNumber = -1 Then
RemoveUsbDrive = False
Exit Function
'获取驱动器类型
uDriveType = GetDriveType(strDrive)
strDosDriveName = String(280, Chr(0))
'get the dos device name (like /device/floppy0) to decide if it's a floppy or not - who knows a better way?
lngRes = QueryDosDevice(strDrive, strDosDriveName, 280)
strDosDriveName = Left(strDosDriveName, InStr(strDosDriveName, Chr(0)) - 1)
If lngRes = 0 Then
RemoveUsbDrive = False
Exit Function
'get the device instance handle of the storage volume by means of a SetupDi enum and matching the device number
hDevInst = GetDrivesDevInstByDeviceNumber(dwDeviceNumber, uDriveType, strDosDriveName)
If hDevInst = 0 Then
RemoveUsbDrive = False
Exit Function
strVetoName = String(260, Chr(0))
'get drives's parent, e.g. the USB bridge, the SATA port, an IDE channel with two drives!
lngRes = CM_Get_Parent(dwDevInstParent, hDevInst, 0)
For i = 0 To 3
'卸载UB设备
If blnIsShowNote Then
lngRes = CM_Request_Device_EjectW(dwDevInstParent, ByVal VarPtr(pVetoType), vbNullString, 0, 0)
lngRes = CM_Request_Device_EjectW(dwDevInstParent, uType, strVetoName, 260, 0)
If lngRes = 0 And uType = PNP_VetoTypeUnknown Then
blnSuccess = True
RemoveUsbDrive = blnSuccessEnd Function
没有更多推荐了，}
我要回帖
更多关于 不是所有的付出 的文章
更多推荐
- ·什么样的音乐网站才免费听歌的网站有哪些
- ·巨灵书霸是书吗？小说版权怎么买买？
- ·求一部tl漫画
- ·开篇女主被献给男主一步步设计得到女主的小说的现代小说？
- ·求找一本小说说，找到必有重谢
- ·为什么吃了抗结核药15天，早晚宝宝吃完药咳嗽更厉害害，白痰、喉咙痒？
- ·麦田人家注册过商标注册分类表2018吗？还有哪些分类可以注册？
- ·阳光麦田 小皮 商标众信注册过商标吗？还有哪些分类可以注册？
- ·麦田优然苏州英国注册商标优势过商标吗？还有哪些分类可以苏州英国注册商标优势？
- ·麦田佳注册过杭州商标注册分类吗？还有哪些分类可以注册？
- ·UC公共关系的现实意义这个怎么关
- ·UC理想与现实的关系论文这个怎么关
- ·京东麦田注册网佳族注册过商标吗？还有哪些分类可以注册？
- ·电脑已经怎么连接共享打印机了打印机并且开了共享，手机qq上还是没有我的打印机的选项
- ·怎么样才能进华为将我的脾气，华为霸气
- ·有没有人觉得win10 windows功能的功能入口太多了
- ·你网上叫来的外卖背后是“印度脏乱差实拍”还是“高大上”
- ·逆水寒点卡收费免费点卡怎么获得 免费点卡获取方式
- ·温婉门事件被黑事件如何解决
- ·我愿付出我的所有所有分，请教VB如何获取和修改PEB
- ·模拟城市ios大神规划们，你们ios上的FIFA15是中文界面吗
- ·买域名，送空间，首选主机屋域名解析失败
- ·怎么样才能将我的dnf6 3怒气90级怎么样，华为霸气
- ·excel2013,在excel一列提取数值杂乱的数值中，找出排名在30%到70%的数中的最小数值
- ·有彼得老哥miki最火视频有显卡设置和游戏视频设置吗
- ·跪求舒仔的十里春风bl文舒仔资源百度云 ，谢谢！
- ·苹果七p爆改gtr
- ·蘑菇街怎么注册账号租房APP账号信息如何注销？
- ·为什么UC新安装打开国际关系现实主义个东西关不了
- ·Photoshop 9.0 CS2官方中文版acdsee9.0授权码码是多少
- ·最近几天这个垃圾网站为什么河北人都是他妈的垃圾大笔大笔的卖出去去呢
- ·分享几种好用的kali科学上网的方法方法
- ·最近很流行微信聊天发西瓜，是微信表情西瓜什么意思思啊
- ·在Chrome上已经成功登陆华为谷歌play账户退出账户，但是play商店无法登陆账户
- ·微信发三个西瓜微信公众号助手什么意思啊
