Leaked source code of windows server 2003
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 

2322 lines
74 KiB

// *********************************************************************************
//
// Copyright (c) Microsoft Corporation
//
// Module Name:
//
// Terminate.cpp
//
// Abstract:
//
// This module implements the actual termination of process
//
// Author:
//
// Sunil G.V.N. Murali ([email protected]) 26-Nov-2000
//
// Revision History:
//
// Sunil G.V.N. Murali ([email protected]) 26-Nov-2000 : Created It.
//
// *********************************************************************************
#include "pch.h"
#include "wmi.h"
#include "TaskKill.h"
//
// define(s) / constants
//
#define MAX_ENUM_TASKS 5
#define MAX_ENUM_SERVICES 10
#define MAX_ENUM_MODULES 10
#define WAIT_TIME_IN_SECS 1000 // 1 second ( 1000 milliseconds )
#define MAX_TIMEOUT_RETRIES 60 // 60 times
#define MAX_TERMINATE_TIMEOUT 1000 // 1 seconds
// We won't allow the following set of critical system processes to be terminated,
// since the system would bug check immediately, no matter who you are.
#define PROCESS_CSRSS_EXE L"csrss.exe"
#define PROCESS_WINLOGON_EXE L"winlogon.exe"
#define PROCESS_SMSS_EXE L"smss.exe"
#define PROCESS_SERVICES_EXE L"services.exe"
//
// function prototypes
//
#ifndef _WIN64
BOOL EnumLoadedModulesProc( LPSTR lpszModuleName, ULONG ulModuleBase, ULONG ulModuleSize, PVOID pUserData );
#else
BOOL EnumLoadedModulesProc64( LPSTR lpszModuleName, DWORD64 ulModuleBase, ULONG ulModuleSize, PVOID pUserData );
#endif
BOOL
CTaskKill::DoTerminate(
OUT DWORD& dwExitCode
)
/*++
Routine Description:
Search for a valid process to terminate and if found terminate.
Arguments:
OUT dwExitcode : Contains number with which to exit process.
Return Value:
TRUE upon successfull and FALSE if failed
--*/
{
// local variables
HRESULT hr = S_OK;
CHString str;
LONG lIndex = -1;
DWORD dwCount = 0;
DWORD dwKilled = 0;
DWORD dwFilters = 0;
DWORD dwTimeOuts = 0;
DWORD dwImageNames = 0;
DWORD dwTasksToKill = 0;
DWORD dwMatchedIndex = 0;
BOOL bCanExit = FALSE;
BOOL bAllTasks = FALSE;
BOOL bImageName = FALSE;
ULONG ulReturned = 0;
TARRAY arrTasks = NULL;
TARRAY arrImageNames = NULL;
LPCWSTR pwszTask = NULL;
IWbemClassObject* pObjects[ MAX_ENUM_TASKS ];
// clear the error
SetLastError( ( DWORD )NO_ERROR );
try
{
//
// prepare ...
bCanExit = FALSE;
dwImageNames = 0;
dwFilters = DynArrayGetCount( m_arrFiltersEx );
dwTasksToKill = DynArrayGetCount( m_arrTasksToKill );
arrTasks = CreateDynamicArray();
arrImageNames = CreateDynamicArray();
if ( ( NULL == arrImageNames ) || ( NULL == arrTasks ) )
{
dwExitCode = 1;
SetLastError( ( DWORD )E_OUTOFMEMORY );
SaveLastError();
// release the allocations
DESTROY_ARRAY( arrTasks );
DESTROY_ARRAY( arrImageNames );
// inform failure
return FALSE;
}
// check if '*' is specified or not
lIndex = DynArrayFindString( m_arrTasksToKill, L"*", TRUE, 0 );
if ( lIndex != -1 )
{
// wild card specified
dwTasksToKill--; // update the counter
bAllTasks = TRUE; // remember
DynArrayRemove( m_arrTasksToKill, lIndex ); // remove the wildcard entry
}
// init all the objects first
for( DWORD dw = 0; dw < MAX_ENUM_TASKS; dw++ )
{
pObjects[ dw ] = NULL;
}
// if -tr is specified, free the already allocated memory for m_arrRecord
if ( TRUE == m_bTree )
{
DESTROY_ARRAY( m_arrRecord );
}
// traverse thru the running processed and terminate the needed
dwCount = 0;
dwKilled = 0;
do
{
// get the object ... time out should not occur
// NOTE: one-by-one
hr = m_pWbemEnumObjects->Next(
WAIT_TIME_IN_SECS, MAX_ENUM_TASKS, pObjects, &ulReturned );
if ( hr == (HRESULT) WBEM_S_FALSE )
{
// we've reached the end of enumeration .. set the flag
bCanExit = TRUE;
}
else if ( hr == (HRESULT) WBEM_S_TIMEDOUT )
{
// update the timeouts occured
dwTimeOuts++;
// check if max. retries have reached ... if yes better stop
if ( dwTimeOuts > MAX_TIMEOUT_RETRIES )
{
dwExitCode = 1;
DESTROY_ARRAY( arrTasks );
DESTROY_ARRAY( arrImageNames );
SetLastError( ( DWORD )ERROR_TIMEOUT );
SaveLastError();
return FALSE;
}
// still we can do some more tries ...
continue;
}
else if ( FAILED( hr ) )
{
// some error has occured ... oooppps
dwExitCode = 1;
DESTROY_ARRAY( arrTasks );
DESTROY_ARRAY( arrImageNames );
WMISaveError( hr );
return FALSE;
}
// reset the timeout counter
dwTimeOuts = 0;
// loop thru the objects and save the info
for( ULONG ul = 0; ul < ulReturned; ul++ )
{
// if tree option is specified, allocate memory for record every we loop
if ( m_bTree == TRUE )
{
// create a new array
m_arrRecord = CreateDynamicArray();
if ( m_arrRecord == NULL )
{
dwExitCode = 1;
SetLastError( ( DWORD )E_OUTOFMEMORY );
SaveLastError();
// release the allocations
DESTROY_ARRAY( arrTasks );
DESTROY_ARRAY( arrImageNames );
// inform failure
return FALSE;
}
}
else
{
// tree option is not specified, so, just remove the contents
DynArrayRemoveAll( m_arrRecord );
}
// add the columns first
DynArrayAddColumns( m_arrRecord, MAX_TASKSINFO );
// retrive and save data
SaveData( pObjects[ ul ] );
// release the object
SAFE_RELEASE( pObjects[ ul ] );
// check if this has to be filtered or not
if ( dwFilters != 0 )
{
BOOL bIgnore = FALSE;
bIgnore = CanFilterRecord( MAX_FILTERS,
m_pfilterConfigs, m_arrRecord, m_arrFiltersEx );
// check if this has to be ignored or not
if ( bIgnore == TRUE )
{
if ( m_bTree == TRUE )
{
// save this record with rank as 0
DynArraySetDWORD( m_arrRecord, TASK_RANK, 0 );
DynArrayAppendEx( arrTasks, m_arrRecord );
}
// continue to the task
continue;
}
}
// crossed from the filter -- update the count
dwCount++;
// find the task that has to be killed
// and check if this task has to be killed or not
lIndex = -1;
pwszTask = NULL;
bImageName = FALSE;
if ( dwTasksToKill != 0 || dwImageNames != 0 )
{
// check if the process is in list
if ( dwTasksToKill != 0 )
lIndex = MatchTaskToKill( dwMatchedIndex );
// if task is not, check if image names exist and if it matches or not
if ( lIndex == -1 && dwImageNames != 0 )
{
// get the image name and search for the same in the image names list
DWORD dwLength = 0;
LPCWSTR pwsz = NULL;
LPCWSTR pwszTemp = NULL;
LPCWSTR pwszImageName = NULL;
pwszImageName = DynArrayItemAsString( m_arrRecord, TASK_IMAGENAME );
if ( pwszImageName == NULL )
{
dwExitCode = 1;
DESTROY_ARRAY( arrTasks );
DESTROY_ARRAY( arrImageNames );
SetLastError( ( DWORD )STG_E_UNKNOWN );
SaveLastError();
return FALSE;
}
// ...
for( DWORD dw = 0; dw < dwImageNames; dw++ )
{
// get the image name from the list
pwszTemp = DynArrayItemAsString( arrImageNames, dw );
if ( pwszTemp == NULL )
{
dwExitCode = 1;
DESTROY_ARRAY( arrTasks );
DESTROY_ARRAY( arrImageNames );
SetLastError( ( DWORD )STG_E_UNKNOWN );
SaveLastError();
return FALSE;
}
// determine the no. of characters to compare
dwLength = 0;
pwsz = FindChar( pwszTemp, L'*', 0 );
if ( pwsz != NULL )
{
// '*' - wildcard is specified in the image name
// so, determine the no. of characters to compare
// but before that check the length of the string pointer from '*'
// it should be 1 - meaning the '*' can be specified only at the end
// but not in the middle
if ( 1 == StringLength( pwsz, 0 ) )
{
dwLength = StringLength( pwszTemp, 0 ) - StringLength( pwsz, 0 );
}
}
// now do the comparision
if ( StringCompare( pwszImageName, pwszTemp, TRUE, dwLength ) == 0 )
{
// image found - has to be terminated
bImageName = TRUE;
pwszTask = pwszTemp;
}
}
}
else if ( lIndex != -1 && dwMatchedIndex == TASK_IMAGENAME )
{
bImageName = TRUE; // image name
pwszTask = DynArrayItemAsString( m_arrTasksToKill, lIndex );
}
}
// check whether attempt to terminate or not to attempt
if ( bAllTasks == FALSE && lIndex == -1 && bImageName == FALSE )
{
if ( m_bTree == TRUE )
{
// save this record with rank as 0
dwCount--;
DynArraySetDWORD( m_arrRecord, TASK_RANK, 0 );
DynArrayAppendEx( arrTasks, m_arrRecord );
}
// continue to the task
continue;
}
// we need to post-pone the killing of the current identified task till we get the
// entire list of processes
if ( m_bTree == TRUE )
{
// mark this as rank 1 process
DynArraySetDWORD( m_arrRecord, TASK_RANK, 1 );
// now add this record to the tasks array
DynArrayAppendEx( arrTasks, m_arrRecord );
}
else
{
// kill the current task
if ( this->Kill() == TRUE )
{
dwKilled++; // updated killed processes counter
// success message will depend on the task info specified by the user
// at the command prompt
if ( bImageName == TRUE )
{
if ( m_bLocalSystem == TRUE && m_bForce == FALSE )
{
str.Format(MSG_KILL_SUCCESS_QUEUED_EX, m_strImageName, m_dwProcessId);
}
else
{
str.Format(MSG_KILL_SUCCESS_EX, m_strImageName, m_dwProcessId);
}
}
else
{
if ( m_bLocalSystem == TRUE && m_bForce == FALSE )
{
str.Format( MSG_KILL_SUCCESS_QUEUED, m_dwProcessId );
}
else
{
str.Format( MSG_KILL_SUCCESS, m_dwProcessId );
}
}
// show the message
ShowMessage( stdout, str );
}
else
{
// failed to kill the process .. save the error message
if ( bImageName == FALSE )
str.Format( ERROR_KILL_FAILED, m_dwProcessId, GetReason() );
else
str.Format( ERROR_KILL_FAILED_EX, m_strImageName, m_dwProcessId, GetReason() );
// show the message
ShowMessage( stderr, str );
}
}
// user might have specified the duplications in the list
// so check for that and remove it
if ( bImageName == TRUE )
{
// sub-local
CHString strProcessId;
LONG lProcessIndex = -1;
strProcessId.Format( L"%ld", m_dwProcessId );
lProcessIndex = DynArrayFindString( m_arrTasksToKill, strProcessId, TRUE, 0 );
if ( lProcessIndex != -1 && lIndex != lProcessIndex )
DynArrayRemove( m_arrTasksToKill, lProcessIndex );
}
else if ( pwszTask != NULL )
{
// sub-local
LONG lProcessIndex = -1;
lProcessIndex = DynArrayFindString( m_arrTasksToKill, pwszTask, TRUE, 0 );
if ( lProcessIndex != -1 && lIndex != lProcessIndex )
{
bImageName = TRUE;
DynArrayRemove( m_arrTasksToKill, lProcessIndex );
}
}
// if this is a image name, all the tasks with this image name
// has to be terminated. so we need to save the image name
// but before doing this, in order to save memory, check if this image name
// already exists in the list .. this will avoid duplication of image names
// in the list and helps in performace
if ( bImageName == TRUE && pwszTask != NULL &&
DynArrayFindString(arrImageNames, pwszTask, TRUE, 0) == -1 )
{
// add to the list
dwImageNames++;
DynArrayAppendString( arrImageNames, pwszTask, 0 );
}
// delete the process info from the arrProcesses ( if needed )
if ( lIndex != -1 )
{
// yes ... current task was killed remove the entry from arrProcess into
// consideration ... so delete it
dwTasksToKill--; // update the counter
DynArrayRemove( m_arrTasksToKill, lIndex );
}
// check whether we need to quit the program or not
if ( m_bTree == FALSE && bAllTasks == FALSE && dwTasksToKill == 0 && dwImageNames == 0 )
{
bCanExit = TRUE;
break;
}
}
} while ( bCanExit == FALSE );
// Check (a) are there any process to kill, (b) If yes, are any process killed.
if( ( 0 != dwCount ) &&( 0 == dwKilled ) )
{
dwExitCode = 1;
}
// if the -tr is specified, reset the m_arrRecord variable to NULL
// this will avoid double free-ing the same heap memory
if ( m_bTree == TRUE )
{
m_arrRecord = NULL;
}
//
// SPECIAL HANDLING FOR TREE TERMINATION STARTS HERE
//
if ( m_bTree == TRUE && dwCount != 0 )
{
//
// prepare the tree
// sub-local variables
LONG lTemp = 0;
DWORD dwTemp = 0;
DWORD dwRank = 0;
DWORD dwIndex = 0;
DWORD dwLastRank = 0;
DWORD dwTasksCount = 0;
DWORD dwProcessId = 0;
DWORD dwParentProcessId = 0;
// Need to set error code to 0.
dwExitCode = 0;
// loop thru the list of processes
dwLastRank = 1;
dwTasksCount = DynArrayGetCount( arrTasks );
for( dwIndex = 0; dwIndex < dwTasksCount; dwIndex++ )
{
// get the rank of the current process
// and check whether the current process is marked for termination or not
dwRank = DynArrayItemAsDWORD2( arrTasks, dwIndex, TASK_RANK );
if ( dwRank == 0 )
continue;
// now loop thru the begining of the tasks and
// assign the ranks to the childs of this process
dwProcessId = DynArrayItemAsDWORD2( arrTasks, dwIndex, TASK_PID );
for( DWORD dw = dwIndex + 1; dw < dwTasksCount; dw++ )
{
// get the process id this process
dwTemp = DynArrayItemAsDWORD2( arrTasks, dw, TASK_PID );
if ( dwTemp == dwProcessId )
continue; // skip this process
// get the parent process id of this process
dwParentProcessId = DynArrayItemAsDWORD2( arrTasks, dw, TASK_CREATINGPROCESSID );
if ( dwTemp == dwParentProcessId )
continue; // skip this process also
// check the process relation
if ( dwProcessId == dwParentProcessId )
{
// set the rank to this process
DynArraySetDWORD2( arrTasks, dw, TASK_RANK, dwRank + 1 );
// update the last rank
if ( dwRank + 1 > dwLastRank )
{
dwLastRank = dwRank + 1;
}
// SPECIAL CONDITION:
// -----------------
// we need to check the index of this task in the list of tasks information we have
// if the index of this task information is above its parent process,
// we need to re-initiate the outter loop once again
// this is a sort of optimization which we are doing here instead of looping the
// outter loop unnecessarily
// if ( dw < dwIndex )
// {
// dwIndex = 0;
// }
// ----------------------------------------------------------
// currently we are assuming that the list of processe we get
// will be in sorting order of creation time
// ----------------------------------------------------------
}
}
}
//
// now start terminating the tasks based on their ranks
dwKilled = 0;
for( dwRank = dwLastRank; dwRank > 0; dwRank-- )
{
// loop thru all the processes and terminate
for ( lIndex = 0; lIndex < (LONG) dwTasksCount; lIndex++ )
{
// get the record
m_arrRecord = (TARRAY) DynArrayItem( arrTasks, lIndex );
if ( m_arrRecord == NULL )
continue;
// check the rank
dwTemp = DynArrayItemAsDWORD( m_arrRecord, TASK_RANK );
if ( dwTemp != dwRank )
{
// OPTIMIZATION:
// ------------
// check the rank. if the rank is zero, delete this task from the list
// this improves the performance when we run for the next loop
if ( dwTemp == 0 )
{
DynArrayRemove( arrTasks, lIndex );
lIndex--;
dwTasksCount--;
}
// skip this task
continue;
}
// get the process id and its parent process id
m_dwProcessId = DynArrayItemAsDWORD( m_arrRecord, TASK_PID );
dwParentProcessId = DynArrayItemAsDWORD( m_arrRecord, TASK_CREATINGPROCESSID );
// ensure that there are no child for this process
// NOTE: Termination of some childs might have failed ( this is needed only if -f is not specified )
if ( m_bForce == FALSE )
{
lTemp = DynArrayFindDWORDEx( arrTasks, TASK_CREATINGPROCESSID, m_dwProcessId );
if ( lTemp != -1 )
{
// set the reason
SetReason( ERROR_TASK_HAS_CHILDS );
// format the error message
str.Format( ERROR_TREE_KILL_FAILED, m_dwProcessId, dwParentProcessId, GetReason() );
// show the message
ShowMessage( stderr, str );
// skip this
continue;
}
}
// kill the current task
if ( this->Kill() == TRUE )
{
dwKilled++; // updated killed processes counter
// prepare the error message
if ( m_bForce == TRUE )
{
str.Format( MSG_TREE_KILL_SUCCESS, m_dwProcessId, dwParentProcessId );
}
else
{
str.Format( MSG_TREE_KILL_SUCCESS_QUEUED, m_dwProcessId, dwParentProcessId );
}
// remove the current task entry from the list and update the indexes accordingly
DynArrayRemove( arrTasks, lIndex );
lIndex--;
dwTasksCount--;
// show the message
ShowMessage( stdout, str );
}
else
{
// prepare the error message
str.Format( ERROR_TREE_KILL_FAILED, m_dwProcessId, dwParentProcessId, GetReason() );
// show the message
ShowMessage( stderr, str );
}
}
}
// reset the value of m_arrRecord
m_arrRecord = NULL;
// determine the exit code
if ( dwTasksCount == dwCount )
dwExitCode = 255; // not even one task got terminated
else if ( dwTasksToKill != 0 || dwTasksCount != 0 )
dwExitCode = 128; // tasks were terminated partially
}
//
// SPECIAL HANDLING FOR TREE TERMINATION ENDS HERE
//
}
catch( CHeap_Exception )
{
// free the memory
DESTROY_ARRAY( arrTasks );
DESTROY_ARRAY( arrImageNames );
SetLastError( ( DWORD )E_OUTOFMEMORY );
return 255;
}
// free the memory
DESTROY_ARRAY( arrTasks );
DESTROY_ARRAY( arrImageNames );
// final check-up ...
if ( ( 0 == dwCount ) &&
( ( 0 == dwTasksToKill ) ||
( TRUE == m_bFiltersOptimized ) ||
( 0 != dwFilters ) ) )
{
dwExitCode = 0;
ShowMessage( stdout, ERROR_NO_PROCESSES ); // no tasks were found
}
else
{
if ( 0 != dwTasksToKill )
{
// some processes which are requested to kill are not found
LPCWSTR pwszTemp = NULL;
for( DWORD dw = 0; dw < dwTasksToKill; dw++ )
{
// get the task name
pwszTemp = DynArrayItemAsString( m_arrTasksToKill, dw );
if ( NULL == pwszTemp )
{
continue; // skip
}
try
{
// prepare and display message ...
str.Format( ERROR_PROCESS_NOTFOUND, pwszTemp );
ShowMessage( stderr, str );
}
catch( CHeap_Exception )
{
SetLastError( ( DWORD )E_OUTOFMEMORY );
return 255;
}
}
// exit code
dwExitCode = 128;
}
}
// return
return TRUE;
}
inline BOOL
CTaskKill::Kill(
void
)
/*++
Routine Description:
Invokes the appropriate kill function based on the mode of termination
Arguments:
NONE
Return Value:
TRUE upon successfull and FALSE if failed
--*/
{
// local variables
BOOL bResult = FALSE;
// check whether task can be terminated or not
if ( FALSE == CanTerminate() )
{
return FALSE;
}
// check whether local system / remote system
if ( TRUE == m_bLocalSystem )
{
//
// process termination on local system
// based on the mode of termination invoke appropriate method
if ( FALSE == m_bForce )
{
bResult = KillProcessOnLocalSystem();
}
else
{
bResult = ForciblyKillProcessOnLocalSystem();
}
}
else
{
//
// process termination on remote system
// silent termination of the process on a remote system is not supported
// it will be always forcible termination
bResult = ForciblyKillProcessOnRemoteSystem();
}
// inform the result
return bResult;
}
BOOL
CTaskKill::KillProcessOnLocalSystem(
void
)
/*++
Routine Description:
Terminates the process in silence mode ... by posting WM_CLOSE message
this is for local system only
Arguments:
NONE
Return Value:
TRUE upon successfull and FALSE if failed
--*/
{
// local variables
HDESK hDesk = NULL;
HDESK hdeskSave = NULL;
HWINSTA hWinSta = NULL;
HWINSTA hwinstaSave = NULL;
HANDLE hProcess = NULL;
BOOL bReturn = FALSE;
// variables which contains data
HWND hWnd = NULL;
LPCWSTR pwszDesktop = NULL;
LPCWSTR pwszWindowStation = NULL;
// clear the reason
SetReason( NULL_STRING );
// Get process handle for termination.
// This is done so as to know whether the logged user has
// adequate permissions to kill the process.
hProcess = OpenProcess( PROCESS_TERMINATE, FALSE, m_dwProcessId );
if( NULL == hProcess )
{ // Current user don't have permissions to kill the process.
SaveLastError();
return bReturn;
}
// close the handle to the process
// Current user can kill the process.
CloseHandle( hProcess );
hProcess = NULL;
// get the window station and desktop information
hWnd = ( HWND ) DynArrayItemAsHandle( m_arrRecord, TASK_HWND );
pwszDesktop = DynArrayItemAsString( m_arrRecord, TASK_DESK );
pwszWindowStation = DynArrayItemAsString( m_arrRecord, TASK_WINSTA );
// check whether window window handle exists for this process or not if not, return
if ( hWnd == NULL )
{
SetLastError( ( DWORD )CO_E_NOT_SUPPORTED );
SetReason( ERROR_CANNOT_KILL_SILENTLY );
return bReturn;
}
// get and save the current window station and desktop
hwinstaSave = GetProcessWindowStation();
hdeskSave = GetThreadDesktop( GetCurrentThreadId() );
// open current tasks window station and change the context to the new workstation
if ( NULL != pwszWindowStation )
{
//
// process has window station ... get it
hWinSta = OpenWindowStation( pwszWindowStation,
FALSE, WINSTA_ENUMERATE | WINSTA_ENUMDESKTOPS );
if ( NULL == hWinSta )
{
// failed in getting the process window station
SaveLastError();
return FALSE;
}
else
{
// change the context to the new workstation
if ( ( hWinSta != hwinstaSave ) && ( FALSE == SetProcessWindowStation( hWinSta ) ) )
{
// failed in changing the context
// restore the context to the previous window station
CloseWindowStation( hWinSta );
SaveLastError();
return FALSE;
}
}
}
// open the tasks desktop and change the context to the new desktop
if ( NULL != pwszDesktop )
{
//
// process has desktop ... get it
hDesk = OpenDesktop( pwszDesktop, 0, FALSE, DESKTOP_ENUMERATE );
if ( NULL == hDesk )
{
// failed in getting the process desktop
// restore the context to the previous window station
if ( ( NULL != hWinSta ) && ( hWinSta != hwinstaSave ) )
{
SetProcessWindowStation( hwinstaSave );
CloseWindowStation( hWinSta );
}
SaveLastError();
return FALSE;
}
else
{
// change the context to the new desktop
if ( ( hDesk != hdeskSave ) && ( FALSE == SetThreadDesktop( hDesk ) ) )
{
// failed in changing the context
// restore the context to the previous window station
CloseDesktop( hDesk );
if ( ( NULL != hWinSta ) && ( hWinSta != hwinstaSave ) )
{
SetProcessWindowStation( hwinstaSave );
CloseWindowStation( hWinSta );
}
SaveLastError();
return FALSE;
}
}
}
// atlast ... now kill the process
if ( ( NULL != hWnd ) && ( PostMessage( hWnd, WM_CLOSE, 0, 0 ) == FALSE ) )
{
// failed in posting the message
SaveLastError();
}
else
{
bReturn = TRUE;
}
// restore the previous desktop
if ( ( NULL != hDesk ) && ( hDesk != hdeskSave ) )
{
SetThreadDesktop( hdeskSave );
CloseDesktop( hDesk );
}
// restore the context to the previous window station
if ( ( NULL != hWinSta ) && ( hWinSta != hwinstaSave ) )
{
SetProcessWindowStation( hwinstaSave );
CloseWindowStation( hWinSta );
}
// inform success
return bReturn;
}
BOOL
CTaskKill::ForciblyKillProcessOnLocalSystem(
void
)
/*++
Routine Description:
Terminates the process forcibly ... this is for local system only
Arguments:
NONE
Return Value:
TRUE upon successfull and FALSE if failed
--*/
{
// local variables
DWORD dwExitCode = 0;
HANDLE hProcess = NULL;
// get the handle to the process using the process id
hProcess = OpenProcess(
PROCESS_TERMINATE | PROCESS_QUERY_INFORMATION, FALSE, m_dwProcessId );
// check whether we got the handle successfully or not ... if not error
if ( NULL == hProcess )
{
// failed in getting the process handle ... may be process might have finished
// there is one occassion in which, we get the last error as invalid parameter
// 'coz it doesn't convey proper message to the user, we will check for that error
// and change the message appropriately
if ( GetLastError() == ERROR_INVALID_PARAMETER )
{
SetLastError( ( DWORD )CO_E_NOT_SUPPORTED );
}
// save the error message
SaveLastError();
// return failure
return FALSE;
}
// get the state of the process
if ( FALSE == GetExitCodeProcess( hProcess, &dwExitCode ) )
{
// unknow error has occured ... failed
CloseHandle( hProcess ); // close the process handle
SaveLastError();
return FALSE;
}
// now check whether the process is active or not
if ( STILL_ACTIVE != dwExitCode )
{
// process is not active ... it is already terminated
CloseHandle( hProcess ); // close the process handle
SetLastError( ( DWORD )SCHED_E_TASK_NOT_RUNNING );
SaveLastError();
return FALSE;
}
// now forcibly try to terminate the process ( exit code will be 1 )
if ( TerminateProcess( hProcess, 1 ) == FALSE )
{
// failed in terminating the process
CloseHandle( hProcess ); // close the process handle
// there is one occassion in which, we get the last error as invalid parameter
// 'coz it doesn't convey proper message to the user, we will check for that error
// and change the message appropriately
if ( GetLastError() == ERROR_INVALID_PARAMETER )
{
SetLastError( ( DWORD )CO_E_NOT_SUPPORTED );
}
// save the error message
SaveLastError();
// return failure
return FALSE;
}
// successfully terminated the process with exit code 1
CloseHandle( hProcess ); // close the process handle
return TRUE; // inform success
}
BOOL
CTaskKill::ForciblyKillProcessOnRemoteSystem(
void
)
/*++
Routine Description:
Terminates the process forcibly ... uses WMI for terminating
this is for remote system
Arguments:
NONE
Return Value:
TRUE upon successfull and FALSE if failed
--*/
{
// local variables
HRESULT hr = S_OK;
_variant_t varTemp;
BOOL bResult = FALSE;
LPCWSTR pwszPath = NULL;
IWbemClassObject* pInParams = NULL;
IWbemClassObject* pOutParams = NULL;
IWbemCallResult* pCallResult = NULL;
// get the object path
pwszPath = DynArrayItemAsString( m_arrRecord, TASK_OBJPATH );
if ( NULL == pwszPath )
{
SetLastError( ( DWORD )STG_E_UNKNOWN );
SaveLastError();
return FALSE;
}
try
{
// create an instance for input parameters
SAFE_EXECUTE( m_pWbemTerminateInParams->SpawnInstance( 0, &pInParams ) );
// set the reason ( abnormal termination )
varTemp = 1L;
SAFE_EXECUTE( PropertyPut( pInParams, TERMINATE_INPARAM_REASON, varTemp ) );
// now execute the method ( semi-synchronous call )
SAFE_EXECUTE( m_pWbemServices->ExecMethod(
_bstr_t( pwszPath ), _bstr_t( WIN32_PROCESS_METHOD_TERMINATE ),
WBEM_FLAG_RETURN_IMMEDIATELY, NULL, pInParams, NULL, &pCallResult ) );
// set security info to the interface
SAFE_EXECUTE( SetInterfaceSecurity( pCallResult, m_pAuthIdentity ) );
// keep on retring until we get the control or tries reached max
LONG lStatus = 0;
for ( DWORD dw = 0; dw < MAX_TIMEOUT_RETRIES; dw++ )
{
// get the call status
hr = pCallResult->GetCallStatus( 0, &lStatus );
if ( SUCCEEDED( hr ) )
{
break;
}
else
{
if ( hr == (HRESULT) WBEM_S_TIMEDOUT )
{
continue;
}
else
{
_com_issue_error( hr );
}
}
}
// check if time out max. retries finished
if ( MAX_TIMEOUT_RETRIES == dw )
{
_com_issue_error( hr );
}
// now get the result object
SAFE_EXECUTE( pCallResult->GetResultObject( MAX_TERMINATE_TIMEOUT, &pOutParams ) );
// get the return value of the result object
DWORD dwReturnValue = 0;
if ( PropertyGet( pOutParams, WMI_RETURNVALUE, dwReturnValue ) == FALSE )
{
_com_issue_error( ERROR_INTERNAL_ERROR );
}
// now check the return value
// if should be zero .. if not .. failed
if ( 0 != dwReturnValue )
{
//
// format the message and set the reason
// frame the error error message depending on the error
if ( 2 == dwReturnValue )
{
SetLastError( ( DWORD )STG_E_ACCESSDENIED );
SaveLastError();
}
else
{
if ( 3 == dwReturnValue )
{
SetLastError( ( DWORD )ERROR_DS_INSUFF_ACCESS_RIGHTS );
SaveLastError();
}
else
{
CHString str;
str.Format( ERROR_UNABLE_TO_TERMINATE, dwReturnValue );
SetReason( str );
}
}
}
else
{
// everything went successfully ... process terminated successfully
bResult = TRUE;
}
}
catch( _com_error& e )
{
// save the error message and mark as failure
WMISaveError( e );
bResult = FALSE;
}
catch( CHeap_Exception )
{
WMISaveError( E_OUTOFMEMORY );
bResult = FALSE;
}
// release the in and out params references
SAFE_RELEASE( pInParams );
SAFE_RELEASE( pOutParams );
SAFE_RELEASE( pCallResult );
// return the result
return bResult;
}
LONG
CTaskKill::MatchTaskToKill(
OUT DWORD& dwMatchedIndex
)
/*++
Routine Description:
Matches a task to kill.
Arguments:
[ out ] dwMatchedIndex : Process Id that needs to be killed.
Return Value:
If found task to delete then index value from dynamic array
is returned else -1 is returned.
--*/
{
// local variables
LONG lCount = 0;
DWORD dwLength = 0;
LPCWSTR pwsz = NULL;
LPCWSTR pwszTask = NULL;
// check if this task has to be killed or not
lCount = DynArrayGetCount( m_arrTasksToKill );
for( LONG lIndex = 0; lIndex < lCount; lIndex++ )
{
// get the task specified
pwszTask = DynArrayItemAsString( m_arrTasksToKill, lIndex );
if ( NULL == pwszTask )
{
return -1;
}
// check with process id first ( only if task is in numeric format )
dwMatchedIndex = TASK_PID;
if ( IsNumeric(pwszTask, 10, FALSE) && (m_dwProcessId == (DWORD) AsLong(pwszTask, 10)) )
{
return lIndex; // specified task matched with current process id
}
// determine the no. of characters to compare
dwLength = 0;
pwsz = FindChar( pwszTask, L'*', 0 );
if ( NULL != pwsz )
{
// '*' - wildcard is specified in the image name
// so, determine the no. of characters to compare
// but before that check the length of the string pointer from '*'
// it should be 1 - meaning the '*' can be specified only at the end
// but not in the middle
if ( 1 == StringLength( pwsz, 0 ) )
{
dwLength = StringLength( pwszTask, 0 ) - StringLength( pwsz, 0 );
}
}
// check with image name
dwMatchedIndex = TASK_IMAGENAME;
if ( StringCompare( m_strImageName, pwszTask, TRUE, dwLength ) == 0 )
{
return lIndex; // specified task mathed with the image name
}
}
// return the index
return -1;
}
BOOL
CTaskKill::CanTerminate(
void
)
/*++
Routine Description:
Invokes the appropriate kill function based on the mode of termination
Arguments:
NONE
Return Value:
TRUE upon successfull and FALSE if failed
--*/
{
// local variables
DWORD dw = 0;
DWORD dwCount = 0;
LPCWSTR pwszTaskToTerminate = NULL;
//
// prepare a list of os critical tasks
LPCWSTR pwszTasks[] = {
PROCESS_CSRSS_EXE,
PROCESS_SMSS_EXE,
PROCESS_SERVICES_EXE,
PROCESS_WINLOGON_EXE
};
// process id with 0 cannot be terminated
if ( 0 == m_dwProcessId )
{
SetReason( ERROR_CRITICAL_SYSTEM_PROCESS );
return FALSE; // task should not be terminated
}
// the process cannot be terminated itself
if ( m_dwProcessId == m_dwCurrentPid )
{
SetReason( ERROR_CANNOT_KILL_ITSELF );
return FALSE;
}
// get the task name which user is trying to terminate
pwszTaskToTerminate = DynArrayItemAsString( m_arrRecord, TASK_IMAGENAME );
if ( NULL == pwszTaskToTerminate )
{
SetLastError( ( DWORD )STG_E_UNKNOWN );
SaveLastError();
return FALSE; // task should not be terminated
}
// check if user is trying to terminate the os critical task
dwCount = SIZE_OF_ARRAY( pwszTasks );
for( dw = 0; dw < dwCount; dw++ )
{
if ( StringCompare( pwszTasks[ dw ], pwszTaskToTerminate, TRUE, 0 ) == 0 )
{
SetReason( ERROR_CRITICAL_SYSTEM_PROCESS );
return FALSE; // task should not be terminated
}
}
// task can be terminated
return TRUE;
}
VOID
CTaskKill::SaveData(
IN IWbemClassObject* pWmiObject
)
/*++
Routine Description:
Saves process and its information.
Arguments:
IN pWmiObject : Interface pointer.
Return Value:
VOID
--*/
{
// local variables
CHString str;
DWORD dwValue = 0;
try
{
// process id
PropertyGet( pWmiObject, WIN32_PROCESS_PROPERTY_PROCESSID, m_dwProcessId );
DynArraySetDWORD( m_arrRecord, TASK_PID, m_dwProcessId );
// image name
PropertyGet( pWmiObject, WIN32_PROCESS_PROPERTY_IMAGENAME, m_strImageName );
DynArraySetString( m_arrRecord, TASK_IMAGENAME, m_strImageName, 0 );
// object path
PropertyGet( pWmiObject, WIN32_PROCESS_SYSPROPERTY_PATH, str );
DynArraySetString( m_arrRecord, TASK_OBJPATH, str, 0 );
// host name
PropertyGet( pWmiObject, WIN32_PROCESS_PROPERTY_COMPUTER, str );
DynArraySetString( m_arrRecord, TASK_HOSTNAME, str, 0 );
// parent process id
PropertyGet( pWmiObject, WIN32_PROCESS_PROPERTY_PARENTPROCESSID, dwValue, 0 );
DynArraySetDWORD( m_arrRecord, TASK_CREATINGPROCESSID, dwValue );
// user context
SetUserContext( pWmiObject );
// cpu time
SetCPUTime( pWmiObject );
// window title and application / process state
SetWindowTitle( );
// services
SetServicesInfo( );
// modules
SetModulesInfo( );
// check if the tree termination is requested
if ( TRUE == m_bTree )
{
// session id
PropertyGet( pWmiObject, WIN32_PROCESS_PROPERTY_SESSION, dwValue, 0 );
DynArraySetDWORD( m_arrRecord, TASK_SESSION, dwValue );
// mem usage
SetMemUsage( pWmiObject );
}
else
{
//
// status, session id, memory usage
// property retrieval is built into WMI
//
}
}
catch( CHeap_Exception )
{
SetLastError( ( DWORD )E_OUTOFMEMORY );
SaveLastError();
}
}
VOID
CTaskKill::SetUserContext(
IN IWbemClassObject* pWmiObject
)
/*++
Routine Description:
Store username property of a process in dynaimc array.
Arguments:
[ in ] pWmiObject : Contains interface pointer.
Return Value:
VOID
--*/
{
// local variables
HRESULT hr = S_OK;
CHString str;
CHString strPath;
CHString strDomain;
CHString strUserName;
BOOL bResult = FALSE;
IWbemClassObject* pOutParams = NULL;
// check if user name has to be retrieved or not
if ( FALSE == m_bNeedUserContextInfo )
{
return;
}
try
{
//
// for getting the user first we will try with API
// it at all API fails, we will try to get the same information from WMI
//
// get the user name
if ( LoadUserNameFromWinsta( strDomain, strUserName ) == TRUE )
{
// format the user name
str.Format( L"%s\\%s", strDomain, strUserName );
}
else
{
// user name has to be retrieved - get the path of the current object
bResult = PropertyGet( pWmiObject, WIN32_PROCESS_SYSPROPERTY_PATH, strPath );
if ( ( FALSE == bResult ) || ( strPath.GetLength() == 0 ) )
{
return;
}
// execute the GetOwner method and get the user name
// under which the current process is executing
hr = m_pWbemServices->ExecMethod( _bstr_t( strPath ),
_bstr_t( WIN32_PROCESS_METHOD_GETOWNER ), 0, NULL, NULL, &pOutParams, NULL );
if ( FAILED( hr ) )
{
SAFE_RELEASE( pOutParams );
return;
}
// get the domain and user values from out params object
// NOTE: do not check the results
PropertyGet( pOutParams, GETOWNER_RETURNVALUE_DOMAIN, strDomain, L"" );
PropertyGet( pOutParams, GETOWNER_RETURNVALUE_USER, strUserName, L"" );
// 'pOutParams' is no more required.
SAFE_RELEASE( pOutParams );
// get the value
if ( strDomain.GetLength() != 0 )
{
str.Format( L"%s\\%s", strDomain, strUserName );
}
else
{
if ( strUserName.GetLength() != 0 )
{
str = strUserName;
}
}
}
}
catch( CHeap_Exception )
{
SetLastError( ( DWORD ) E_OUTOFMEMORY );
return;
}
// save the info
DynArraySetString( m_arrRecord, TASK_USERNAME, str, 0 );
}
VOID
CTaskKill::SetCPUTime(
IN IWbemClassObject* pWmiObject
)
/*++
Routine Description:
Store CPUTIME property of a process in dynaimc array.
Arguments:
[ in ] pWmiObject : Contains interface pointer.
Return Value:
VOID
--*/
{
// local variables
CHString str;
ULONGLONG ullCPUTime = 0;
ULONGLONG ullUserTime = 0;
ULONGLONG ullKernelTime = 0;
try
{
// get the KernelModeTime value
PropertyGet( pWmiObject, WIN32_PROCESS_PROPERTY_KERNELMODETIME, ullKernelTime );
// get the user mode time
PropertyGet( pWmiObject, WIN32_PROCESS_PROPERTY_USERMODETIME, ullUserTime );
// calculate the CPU time
ullCPUTime = ullUserTime + ullKernelTime;
// now convert the long time into hours format
TIME_FIELDS time;
RtlTimeToElapsedTimeFields ( (LARGE_INTEGER* ) &ullCPUTime, &time );
// convert the days into hours
time.Hour = static_cast<CSHORT>( time.Hour + static_cast<SHORT>( time.Day * 24 ) );
// prepare into time format ( user locale specific time seperator )
str.Format( L"%d:%02d:%02d", time.Hour, time.Minute, time.Second );
// save the info
DynArraySetString( m_arrRecord, TASK_CPUTIME, str, 0 );
}
catch( CHeap_Exception )
{
SetLastError( ( DWORD )E_OUTOFMEMORY );
SaveLastError();
}
}
VOID
CTaskKill::SetWindowTitle(
void
)
/*++
Routine Description:
Store 'Window Title' property of a process in dynaimc array.
Arguments:
NONE
Return Value:
VOID
--*/
{
// local variables
LONG lTemp = 0;
HWND hWnd = NULL;
BOOL bHung = FALSE;
LPCTSTR pszTemp = NULL;
// get the window details ... window station, desktop, window title
// NOTE: This will work only for local system
DynArraySetString( m_arrRecord, TASK_STATUS, VALUE_UNKNOWN, 0 );
lTemp = DynArrayFindDWORDEx( m_arrWindowTitles, CTaskKill::twiProcessId, m_dwProcessId );
if ( -1 != lTemp )
{
// save the window title
pszTemp = DynArrayItemAsString2( m_arrWindowTitles, lTemp, CTaskKill::twiTitle );
if ( NULL != pszTemp )
{
DynArraySetString( m_arrRecord, TASK_WINDOWTITLE, pszTemp, 0 );
}
// save the window station
pszTemp = DynArrayItemAsString2( m_arrWindowTitles, lTemp, CTaskKill::twiWinSta );
if ( NULL != pszTemp )
{
DynArraySetString( m_arrRecord, TASK_WINSTA, pszTemp, 0 );
}
// save the desktop information
pszTemp = DynArrayItemAsString2( m_arrWindowTitles, lTemp, CTaskKill::twiDesktop );
if ( NULL != pszTemp )
{
DynArraySetString( m_arrRecord, TASK_DESK, pszTemp, 0 );
}
// save the window handle also
hWnd = (HWND) DynArrayItemAsHandle2( m_arrWindowTitles, lTemp, CTaskKill::twiHandle );
if ( NULL != hWnd )
{
DynArraySetHandle( m_arrRecord, TASK_HWND, hWnd );
// determine the application / process hung information
bHung = DynArrayItemAsBOOL2( m_arrWindowTitles, lTemp, CTaskKill::twiHungInfo );
if ( TRUE == bHung )
{
// not responding
DynArraySetString( m_arrRecord, TASK_STATUS, VALUE_NOTRESPONDING, 0 );
}
else
{
// running
DynArraySetString( m_arrRecord, TASK_STATUS, VALUE_RUNNING, 0 );
}
}
}
}
VOID
CTaskKill::SetMemUsage(
IN IWbemClassObject* pWmiObject
)
/*++
Routine Description:
Store 'Memory usage' property of a process in dynaimc array.
Arguments:
[ in ] pWmiObject : Contains interface pointer.
Return Value:
VOID
--*/
{
// local variables
CHString str;
NTSTATUS ntstatus;
ULONGLONG ullMemUsage = 0;
LARGE_INTEGER liTemp = { 0, 0 };
CHAR szTempBuffer[ 33 ] = "\0";
try
{
// NOTE:
// ----
// The max. value of
// (2 ^ 64) - 1 = "18,446,744,073,709,600,000 K" (29 chars).
//
// so, the buffer size to store the number is fixed as 32 characters
// which is more than the 29 characters in actuals
// set the default value
DynArraySetString( m_arrRecord, TASK_MEMUSAGE, L"0", 0 );
// get the KernelModeTime value
if ( PropertyGet( pWmiObject, WIN32_PROCESS_PROPERTY_MEMUSAGE, ullMemUsage ) == FALSE )
{
return;
}
// convert the value into K Bytes
ullMemUsage /= 1024;
// now again convert the value from ULONGLONG to string and check the result
liTemp.QuadPart = ullMemUsage;
ntstatus = RtlLargeIntegerToChar( &liTemp, 10, SIZE_OF_ARRAY( szTempBuffer ), szTempBuffer );
if ( ! NT_SUCCESS( ntstatus ) )
{
return;
}
// now copy this info into UNICODE buffer
str = szTempBuffer;
// save the id
DynArraySetString( m_arrRecord, TASK_MEMUSAGE, str, 0 );
}
catch( CHeap_Exception )
{
SetLastError( ( DWORD )E_OUTOFMEMORY );
SaveLastError();
}
}
VOID
CTaskKill::SetServicesInfo(
void
)
/*++
Routine Description:
Store 'Service' property of a process in dynaimc array.
Arguments:
NONE
Return Value:
VOID
--*/
{
// local variables
HRESULT hr = S_OK;
CHString strQuery;
CHString strService;
ULONG ulReturned = 0;
BOOL bResult = FALSE;
BOOL bCanExit = FALSE;
TARRAY arrServices = NULL;
IEnumWbemClassObject* pEnumServices = NULL;
IWbemClassObject* pObjects[ MAX_ENUM_SERVICES ];
// check whether we need to gather services info or not .. if not skip
if ( FALSE == m_bNeedServicesInfo )
{
return;
}
// create array
arrServices = CreateDynamicArray();
if ( NULL == arrServices )
{
SetLastError( ( DWORD )E_OUTOFMEMORY );
SaveLastError();
return;
}
//
// for getting the services info first we will try with the one we got from API
// it at all API fails, we will try to get the same information from WMI
//
try
{
// check whether API returned services or not
if ( NULL != m_pServicesInfo )
{
// get the service names related to the current process
// identify all the services related to the current process ( based on the PID )
// and save the info
for ( DWORD dw = 0; dw < m_dwServicesCount; dw++ )
{
// compare the PID's
if ( m_dwProcessId == m_pServicesInfo[ dw ].ServiceStatusProcess.dwProcessId )
{
// this service is related with the current process ... store service name
DynArrayAppendString( arrServices, m_pServicesInfo[ dw ].lpServiceName, 0 );
}
}
}
else
{
try
{
// init the objects to NULL's
for( DWORD dw = 0; dw < MAX_ENUM_SERVICES; dw++ )
{
pObjects[ dw ] = NULL;
}
// prepare the query
strQuery.Format( WMI_SERVICE_QUERY, m_dwProcessId );
// execute the query
hr = m_pWbemServices->ExecQuery( _bstr_t( WMI_QUERY_TYPE ), _bstr_t( strQuery ),
WBEM_FLAG_RETURN_IMMEDIATELY | WBEM_FLAG_FORWARD_ONLY, NULL, &pEnumServices );
// check the result
if ( FAILED( hr ) )
{
_com_issue_error( hr );
}
// set the security
hr = SetInterfaceSecurity( pEnumServices, m_pAuthIdentity );
if ( FAILED( hr ) )
{
_com_issue_error( hr );
}
// loop thru the service instances
do
{
// get the object ... wait
// NOTE: one-by-one
hr = pEnumServices->Next( WBEM_INFINITE, MAX_ENUM_SERVICES, pObjects, &ulReturned );
if ( hr == (HRESULT) WBEM_S_FALSE )
{
// we've reached the end of enumeration .. set the flag
bCanExit = TRUE;
}
else
{
if ( hr == (HRESULT) WBEM_S_TIMEDOUT || FAILED( hr ) )
{
//
// some error has occured ... oooppps
// exit from the loop
break;
}
}
// loop thru the objects and save the info
for( ULONG ul = 0; ul < ulReturned; ul++ )
{
// get the value of the property
bResult = PropertyGet( pObjects[ ul ], WIN32_SERVICE_PROPERTY_NAME, strService );
if ( TRUE == bResult )
{
DynArrayAppendString( arrServices, strService, 0 );
}
// release the interface
SAFE_RELEASE( pObjects[ ul ] );
}
} while ( bCanExit == FALSE );
}
catch( _com_error& e )
{
// save the error
WMISaveError( e );
}
}
// save and return
DynArraySetEx( m_arrRecord, TASK_SERVICES, arrServices );
}
catch( CHeap_Exception )
{
SetLastError( ( DWORD )E_OUTOFMEMORY );
SaveLastError();
}
// release the objects to NULL's
for( DWORD dw = 0; dw < MAX_ENUM_SERVICES; dw++ )
{
// release all the objects
SAFE_RELEASE( pObjects[ dw ] );
}
// now release the enumeration object
SAFE_RELEASE( pEnumServices );
}
BOOL
CTaskKill::SetModulesInfo(
void
)
/*++
Routine Description:
Store 'Modules' property of a process in dynaimc array.
Arguments:
[ in ] pWmiObject : Contains interface pointer.
Return Value:
TRUE if successful else FALSE.
--*/
{
// local variables
LONG lPos = 0;
BOOL bResult = FALSE;
TARRAY arrModules = NULL;
// check whether we need to get the modules or not
if ( FALSE == m_bNeedModulesInfo )
{
return TRUE;
}
// allocate for memory
arrModules = CreateDynamicArray();
if ( NULL == arrModules )
{
SetLastError( ( DWORD )E_OUTOFMEMORY );
SaveLastError();
return FALSE;
}
// the way we get the modules information is different for local remote
// so depending that call appropriate function
if ( ( TRUE == m_bLocalSystem ) && ( FALSE == m_bUseRemote ) )
{
// enumerate the modules for the current process
bResult = LoadModulesOnLocal( arrModules );
}
else
{
// identify the modules information for the current process ... remote system
bResult = GetModulesOnRemote( arrModules );
}
// check the result
if ( TRUE == bResult )
{
// check if the modules list contains the imagename also. If yes remove that entry
lPos = DynArrayFindString( arrModules, m_strImageName, TRUE, 0 );
if ( -1 != lPos )
{
// remove the entry
DynArrayRemove( arrModules, lPos );
}
}
// save the modules information to the array
// NOTE: irrespective of whether enumeration is success or not we will add the array
DynArraySetEx( m_arrRecord, TASK_MODULES, arrModules );
// return
return bResult;
}
BOOL
CTaskKill::LoadModulesOnLocal(
IN OUT TARRAY arrModules
)
/*++
Routine Description:
Store 'Modules' property of a process in dynaimc array for local system.
Arguments:
[ in out ] arrModules : Contains dynamic array.
Return Value:
TRUE if successful else FALSE.
--*/
{
// local variables
BOOL bResult = FALSE;
HANDLE hProcess = NULL;
// check the input values
if ( NULL == arrModules )
{
return FALSE;
}
// open the process handle
hProcess = OpenProcess( PROCESS_VM_READ | PROCESS_QUERY_INFORMATION, FALSE, m_dwProcessId );
if ( NULL == hProcess )
{
return FALSE; // failed in getting the process handle
}
#ifndef _WIN64
bResult = EnumerateLoadedModules( hProcess, EnumLoadedModulesProc, arrModules );
#else
bResult = EnumerateLoadedModules64( hProcess, EnumLoadedModulesProc64, arrModules );
#endif
// close the process handle .. we dont need this furthur
CloseHandle( hProcess );
hProcess = NULL;
// return
return bResult;
}
BOOL
CTaskKill::GetModulesOnRemote(
IN OUT TARRAY arrModules
)
/*++
Routine Description:
Store 'Modules' property of a process in dynaimc array for remote system.
Arguments:
[ in out ] arrModules : Contains dynamic array.
Return Value:
TRUE if successful else FALSE.
--*/
{
// local variables
DWORD dwOffset = 0;
DWORD dwInstance = 0;
PPERF_OBJECT_TYPE pot = NULL;
PPERF_OBJECT_TYPE potImages = NULL;
PPERF_INSTANCE_DEFINITION pidImages = NULL;
PPERF_COUNTER_BLOCK pcbImages = NULL;
PPERF_OBJECT_TYPE potAddressSpace = NULL;
PPERF_INSTANCE_DEFINITION pidAddressSpace = NULL;
PPERF_COUNTER_BLOCK pcbAddressSpace = NULL;
PPERF_COUNTER_DEFINITION pcd = NULL;
// check the input values
if ( NULL == arrModules )
{
return FALSE;
}
// check whether the performance object exists or not
// if doesn't exists, get the same using WMI
if ( NULL == m_pdb )
{
// invoke the WMI method
return GetModulesOnRemoteEx( arrModules );
}
// get the perf object types
pot = (PPERF_OBJECT_TYPE) ( (LPBYTE) m_pdb + m_pdb->HeaderLength );
for( DWORD dw = 0; dw < m_pdb->NumObjectTypes; dw++ )
{
if ( 740 == pot->ObjectNameTitleIndex )
{
potImages = pot;
}
else
{
if ( 786 == pot->ObjectNameTitleIndex )
{
potAddressSpace = pot;
}
}
// move to the next object
dwOffset = pot->TotalByteLength;
if( 0 != dwOffset )
{
pot = ( (PPERF_OBJECT_TYPE) ((PBYTE) pot + dwOffset));
}
}
// check whether we got both the object types or not
if ( ( NULL == potImages ) || ( NULL == potAddressSpace ) )
{
return FALSE;
}
// find the offset of the process id in the address space object type
// get the first counter definition of address space object
pcd = (PPERF_COUNTER_DEFINITION) ( (LPBYTE) potAddressSpace + potAddressSpace->HeaderLength);
// loop thru the counters and find the offset
dwOffset = 0;
for( DWORD dw = 0; dw < potAddressSpace->NumCounters; dw++)
{
// 784 is the counter for process id
if ( 784 == pcd->CounterNameTitleIndex )
{
dwOffset = pcd->CounterOffset;
break;
}
// next counter
pcd = ( (PPERF_COUNTER_DEFINITION) ( (LPBYTE) pcd + pcd->ByteLength) );
}
// check whether we got the offset or not
// if not, we are unsuccessful
if ( 0 == dwOffset )
{
// set the error message
SetLastError( ( DWORD )ERROR_ACCESS_DENIED );
SaveLastError();
return FALSE;
}
// get the instances
pidImages = (PPERF_INSTANCE_DEFINITION) ( (LPBYTE) potImages + potImages->DefinitionLength );
pidAddressSpace = (PPERF_INSTANCE_DEFINITION) ( (LPBYTE) potAddressSpace + potAddressSpace->DefinitionLength );
// counter blocks
pcbImages = (PPERF_COUNTER_BLOCK) ( (LPBYTE) pidImages + pidImages->ByteLength );
pcbAddressSpace = (PPERF_COUNTER_BLOCK) ( (LPBYTE) pidAddressSpace + pidAddressSpace->ByteLength );
// find the instance number of the process which we are looking for
for( dwInstance = 0; dwInstance < (DWORD) potAddressSpace->NumInstances; dwInstance++ )
{
// sub-local variables
DWORD dwProcessId = 0;
// get the process id
dwProcessId = *((DWORD*) ( (LPBYTE) pcbAddressSpace + dwOffset ));
// now check if this is the process which we are looking for
if ( dwProcessId == m_dwProcessId )
{
break;
}
// continue looping thru other instances
pidAddressSpace = (PPERF_INSTANCE_DEFINITION) ( (LPBYTE) pcbAddressSpace + pcbAddressSpace->ByteLength );
pcbAddressSpace = (PPERF_COUNTER_BLOCK) ( (LPBYTE) pidAddressSpace + pidAddressSpace->ByteLength );
}
// check whether we got the instance or not
// if not, there are no modules for this process
if ( dwInstance == ( DWORD )potAddressSpace->NumInstances )
{
return TRUE;
}
// now based the parent instance, collect all the modules
for( DWORD dw = 0; (LONG) dw < potImages->NumInstances; dw++)
{
// check the parent object instance number
if ( pidImages->ParentObjectInstance == dwInstance )
{
try
{
// sub-local variables
CHString str;
LPWSTR pwszTemp;
// get the buffer
pwszTemp = str.GetBufferSetLength( pidImages->NameLength + 10 ); // +10 to be on safe side
if ( NULL == pwszTemp )
{
SetLastError( ( DWORD )E_OUTOFMEMORY );
SaveLastError();
return FALSE;
}
// get the instance name
StringCopy( pwszTemp,
(LPWSTR) ( (LPBYTE) pidImages + pidImages->NameOffset ),
pidImages->NameLength + 1 );
// release buffer
str.ReleaseBuffer();
// add the info the userdata ( for us we will get that in the form of an array
LONG lIndex = DynArrayAppendString( arrModules, str, 0 );
if ( -1 == lIndex )
{
// append is failed .. this could be because of lack of memory .. stop the enumeration
return FALSE;
}
}
catch( CHeap_Exception )
{
SetLastError( ( DWORD )E_OUTOFMEMORY );
SaveLastError();
return FALSE;
}
}
// continue looping thru other instances
pidImages = (PPERF_INSTANCE_DEFINITION) ( (LPBYTE) pcbImages + pcbImages->ByteLength );
pcbImages = (PPERF_COUNTER_BLOCK) ( (LPBYTE) pidImages + pidImages->ByteLength );
}
return TRUE;
}
BOOL
CTaskKill::GetModulesOnRemoteEx(
IN OUT TARRAY arrModules
)
/*++
Routine Description:
Store 'Modules' property of a process in dynaimc array for remote system.
Arguments:
[ in out ] arrModules : Contains dynamic array.
Return Value:
TRUE if successful else FALSE.
--*/
{
// local variables
HRESULT hr;
CHString strQuery;
CHString strModule;
CHString strFileName;
CHString strExtension;
ULONG ulReturned = 0;
BOOL bRetValue = TRUE;
BOOL bResult = FALSE;
BOOL bCanExit = FALSE;
LPCWSTR pwszPath = NULL;
IEnumWbemClassObject* pEnumModules = NULL;
IWbemClassObject* pObjects[ MAX_ENUM_MODULES ];
// check the input values
if ( NULL == arrModules )
{
return FALSE;
}
// get the path of the object from the tasks array
pwszPath = DynArrayItemAsString( m_arrRecord, TASK_OBJPATH );
if ( NULL == pwszPath )
{
return FALSE;
}
//determine the length of the module name ..
try
{
// init the objects to NULL's
for( DWORD dw = 0; dw < MAX_ENUM_MODULES; dw++ )
{
pObjects[ dw ] = NULL;
}
// prepare the query
strQuery.Format( WMI_MODULES_QUERY, pwszPath );
// execute the query
hr = m_pWbemServices->ExecQuery( _bstr_t( WMI_QUERY_TYPE ), _bstr_t( strQuery ),
WBEM_FLAG_RETURN_IMMEDIATELY | WBEM_FLAG_FORWARD_ONLY, NULL, &pEnumModules );
// check the result
if ( FAILED( hr ) )
{
_com_issue_error( hr );
}
// set the security
hr = SetInterfaceSecurity( pEnumModules, m_pAuthIdentity );
if ( FAILED( hr ) )
{
_com_issue_error( hr );
}
// loop thru the instances
do
{
// get the object ... wait
// NOTE: one-by-one
hr = pEnumModules->Next( WBEM_INFINITE, MAX_ENUM_MODULES, pObjects, &ulReturned );
if ( (HRESULT) WBEM_S_FALSE == hr )
{
// we've reached the end of enumeration .. set the flag
bCanExit = TRUE;
}
else
{
if ( ( (HRESULT) WBEM_S_TIMEDOUT == hr ) || FAILED( hr ))
{
// some error has occured ... oooppps
WMISaveError( hr );
SetLastError( ( DWORD )STG_E_UNKNOWN );
break;
}
}
// loop thru the objects and save the info
for( ULONG ul = 0; ul < ulReturned; ul++ )
{
// get the file name
bResult = PropertyGet( pObjects[ ul ], CIM_DATAFILE_PROPERTY_FILENAME, strFileName );
if ( FALSE == bResult )
{
// release the interface
SAFE_RELEASE( pObjects[ ul ] );
continue;
}
// get the extension
bResult = PropertyGet( pObjects[ ul ], CIM_DATAFILE_PROPERTY_EXTENSION, strExtension );
if ( FALSE == bResult )
{
// release the interface
SAFE_RELEASE( pObjects[ ul ] );
continue;
}
// format the module name
strModule.Format( L"%s.%s", strFileName, strExtension );
// add the info the userdata ( for us we will get that in the form of an array
LONG lIndex = DynArrayAppendString( arrModules, strModule, 0 );
if ( lIndex == -1 )
{
// append is failed .. this could be because of lack of memory .. stop the enumeration
// release the objects to NULL's
for( DWORD dw = 0; dw < MAX_ENUM_MODULES; dw++ )
{
// release all the objects
SAFE_RELEASE( pObjects[ dw ] );
}
// now release the enumeration object
SAFE_RELEASE( pEnumModules );
return FALSE;
}
// release the interface
SAFE_RELEASE( pObjects[ ul ] );
}
} while ( bCanExit == FALSE );
}
catch( _com_error& e )
{
// save the error
WMISaveError( e );
bRetValue = FALSE;
}
catch( CHeap_Exception )
{
// out of memory
WMISaveError( E_OUTOFMEMORY );
bRetValue = FALSE;
}
// release the objects to NULL's
for( DWORD dw = 0; dw < MAX_ENUM_MODULES; dw++ )
{
// release all the objects
SAFE_RELEASE( pObjects[ dw ] );
}
// now release the enumeration object
SAFE_RELEASE( pEnumModules );
// return
return bRetValue;
}
#ifndef _WIN64
BOOL
EnumLoadedModulesProc(
LPSTR lpszModuleName,
ULONG ulModuleBase,
ULONG ulModuleSize,
PVOID pUserData
)
#else
BOOL
EnumLoadedModulesProc64(
LPSTR lpszModuleName,
DWORD64 ulModuleBase,
ULONG ulModuleSize,
PVOID pUserData
)
#endif
/*++
Routine Description:
Arguments:
[ in ] lpszModuleName : Contains module name.
[ in out ] ulModuleBase :
[ in ] ulModuleSize :
[ in ] pUserData : Username information.
Return Value:
TRUE if successful else FALSE.
--*/
{
// local variables
CHString str;
LONG lIndex = 0;
TARRAY arrModules = NULL;
// check the input values
if ( ( NULL == lpszModuleName ) || ( NULL == pUserData ) )
{
return FALSE;
}
// get the array pointer into the local variable
arrModules = (TARRAY) pUserData;
try
{
// copy the module name into the local string variable
// ( conversion from multibyte to unicode will automatically take place )
str = lpszModuleName;
// add the info the userdata ( for us we will get that in the form of an array
lIndex = DynArrayAppendString( arrModules, str, 0 );
if ( lIndex == -1 )
{
// append is failed .. this could be because of lack of memory .. stop the enumeration
return FALSE;
}
}
catch( CHeap_Exception )
{
// out of memory stop the enumeration
return FALSE;
}
// success .. continue the enumeration
return TRUE;
}