如何找出使用.NETlocking文件的过程?

我已经看到了几个有关使用Handle或Process Monitor的答案,但我希望能够在我自己的代码(C#)中find哪个进程正在locking一个文件。

我有一个令人讨厌的感觉,我将不得不在win32 API中大肆渲染,但是如果有人已经这样做了,并且可以把我放在正确的轨道上,我真的很感激这个帮助。

更新

链接到类似的问题

  • 如何找出哪个进程使用c#locking文件?
  • 命令行工具
  • 跨networking
  • lockingUSB设备
  • unit testing失败,locking的文件
  • 删除locking的文件

handle.exe的好处之一是你可以把它作为一个子handle.exe来运行,并parsing输出。

我们在部署脚本中这样做 – 就像魅力一样。

很久以前,因为Windows根本没有跟踪这些信息,所以无法可靠地获取进程locking文件的列表。 为了支持重新启动pipe理器API ,现在跟踪这些信息。

我将放在一个文件path的代码放在一起,并返回所有正在locking该文件的进程的List<Process>

 using System.Runtime.InteropServices; using System.Diagnostics; static public class FileUtil { [StructLayout(LayoutKind.Sequential)] struct RM_UNIQUE_PROCESS { public int dwProcessId; public System.Runtime.InteropServices.ComTypes.FILETIME ProcessStartTime; } const int RmRebootReasonNone = 0; const int CCH_RM_MAX_APP_NAME = 255; const int CCH_RM_MAX_SVC_NAME = 63; enum RM_APP_TYPE { RmUnknownApp = 0, RmMainWindow = 1, RmOtherWindow = 2, RmService = 3, RmExplorer = 4, RmConsole = 5, RmCritical = 1000 } [StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)] struct RM_PROCESS_INFO { public RM_UNIQUE_PROCESS Process; [MarshalAs(UnmanagedType.ByValTStr, SizeConst = CCH_RM_MAX_APP_NAME + 1)] public string strAppName; [MarshalAs(UnmanagedType.ByValTStr, SizeConst = CCH_RM_MAX_SVC_NAME + 1)] public string strServiceShortName; public RM_APP_TYPE ApplicationType; public uint AppStatus; public uint TSSessionId; [MarshalAs(UnmanagedType.Bool)] public bool bRestartable; } [DllImport("rstrtmgr.dll", CharSet = CharSet.Unicode)] static extern int RmRegisterResources(uint pSessionHandle, UInt32 nFiles, string[] rgsFilenames, UInt32 nApplications, [In] RM_UNIQUE_PROCESS[] rgApplications, UInt32 nServices, string[] rgsServiceNames); [DllImport("rstrtmgr.dll", CharSet = CharSet.Auto)] static extern int RmStartSession(out uint pSessionHandle, int dwSessionFlags, string strSessionKey); [DllImport("rstrtmgr.dll")] static extern int RmEndSession(uint pSessionHandle); [DllImport("rstrtmgr.dll")] static extern int RmGetList(uint dwSessionHandle, out uint pnProcInfoNeeded, ref uint pnProcInfo, [In, Out] RM_PROCESS_INFO[] rgAffectedApps, ref uint lpdwRebootReasons); /// <summary> /// Find out what process(es) have a lock on the specified file. /// </summary> /// <param name="path">Path of the file.</param> /// <returns>Processes locking the file</returns> /// <remarks>See also: /// http://msdn.microsoft.com/en-us/library/windows/desktop/aa373661(v=vs.85).aspx /// http://wyupdate.googlecode.com/svn-history/r401/trunk/frmFilesInUse.cs (no copyright in code at time of viewing) /// /// </remarks> static public List<Process> WhoIsLocking(string path) { uint handle; string key = Guid.NewGuid().ToString(); List<Process> processes = new List<Process>(); int res = RmStartSession(out handle, 0, key); if (res != 0) throw new Exception("Could not begin restart session. Unable to determine file locker."); try { const int ERROR_MORE_DATA = 234; uint pnProcInfoNeeded = 0, pnProcInfo = 0, lpdwRebootReasons = RmRebootReasonNone; string[] resources = new string[] { path }; // Just checking on one resource. res = RmRegisterResources(handle, (uint)resources.Length, resources, 0, null, 0, null); if (res != 0) throw new Exception("Could not register resource."); //Note: there's a race condition here -- the first call to RmGetList() returns // the total number of process. However, when we call RmGetList() again to get // the actual processes this number may have increased. res = RmGetList(handle, out pnProcInfoNeeded, ref pnProcInfo, null, ref lpdwRebootReasons); if (res == ERROR_MORE_DATA) { // Create an array to store the process results RM_PROCESS_INFO[] processInfo = new RM_PROCESS_INFO[pnProcInfoNeeded]; pnProcInfo = pnProcInfoNeeded; // Get the list res = RmGetList(handle, out pnProcInfoNeeded, ref pnProcInfo, processInfo, ref lpdwRebootReasons); if (res == 0) { processes = new List<Process>((int)pnProcInfo); // Enumerate all of the results and add them to the // list to be returned for (int i = 0; i < pnProcInfo; i++) { try { processes.Add(Process.GetProcessById(processInfo[i].Process.dwProcessId)); } // catch the error -- in case the process is no longer running catch (ArgumentException) { } } } else throw new Exception("Could not list processes locking resource."); } else if (res != 0) throw new Exception("Could not list processes locking resource. Failed to get size of result."); } finally { RmEndSession(handle); } return processes; } } 

使用有限权限(例如IIS)

这个调用访问registry。 如果进程没有权限,则会得到ERROR_WRITE_FAULT, 意思 An operation was unable to read or write to the registry 。 您可以select性地将您的受限帐户的权限授予registry的必要部分。 尽pipe有限的访问过程设置了一个标志(例如在数据库或文件系统中,或者通过使用诸如队列或命名pipe道之类的进程间通信机制)并且第二个进程调用了重新启动pipe理器API,但是更安全。

向IIS用户授予其他非最小权限是一种安全风险。

从C#调用Win32是非常复杂的。

您应该使用http://technet.microsoft.com/en-us/sysinternals/bb896655.aspx工具Handle.exe

之后,你的C#代码必须是以下内容:

 string fileName = @"c:\aaa.doc";//Path to locked file Process tool = new Process(); tool.StartInfo.FileName = "handle.exe"; tool.StartInfo.Arguments = fileName+" /accepteula"; tool.StartInfo.UseShellExecute = false; tool.StartInfo.RedirectStandardOutput = true; tool.Start(); tool.WaitForExit(); string outputTool = tool.StandardOutput.ReadToEnd(); string matchPattern = @"(?<=\s+pid:\s+)\b(\d+)\b(?=\s+)"; foreach(Match match in Regex.Matches(outputTool, matchPattern)) { Process.GetProcessById(int.Parse(match.Value)).Kill(); } 

我与斯蒂芬的解决scheme有问题。 下面是一个似乎很好的修改版本。

 using System; using System.Collections; using System.Diagnostics; using System.Management; using System.IO; static class Module1 { static internal ArrayList myProcessArray = new ArrayList(); private static Process myProcess; public static void Main() { string strFile = "c:\\windows\\system32\\msi.dll"; ArrayList a = getFileProcesses(strFile); foreach (Process p in a) { Debug.Print(p.ProcessName); } } private static ArrayList getFileProcesses(string strFile) { myProcessArray.Clear(); Process[] processes = Process.GetProcesses(); int i = 0; for (i = 0; i <= processes.GetUpperBound(0) - 1; i++) { myProcess = processes[i]; //if (!myProcess.HasExited) //This will cause an "Access is denied" error if (myProcess.Threads.Count > 0) { try { ProcessModuleCollection modules = myProcess.Modules; int j = 0; for (j = 0; j <= modules.Count - 1; j++) { if ((modules[j].FileName.ToLower().CompareTo(strFile.ToLower()) == 0)) { myProcessArray.Add(myProcess); break; // TODO: might not be correct. Was : Exit For } } } catch (Exception exception) { //MsgBox(("Error : " & exception.Message)) } } } return myProcessArray; } } 

UPDATE

如果您只想知道哪个进程正在locking某个特定的DLL,则可以执行并parsingtasklist /m YourDllName.dll的输出。 适用于Windows XP和更高版本。 看到

这是做什么的? tasklist / m“mscor *”

这适用于被其他进程locking的dll。 这个例程不会找出例如一个文本文件被一个字处理程序locking的情况。

C#:

 using System.Management; using System.IO; static class Module1 { static internal ArrayList myProcessArray = new ArrayList(); private static Process myProcess; public static void Main() { string strFile = "c:\\windows\\system32\\msi.dll"; ArrayList a = getFileProcesses(strFile); foreach (Process p in a) { Debug.Print(p.ProcessName); } } private static ArrayList getFileProcesses(string strFile) { myProcessArray.Clear(); Process[] processes = Process.GetProcesses; int i = 0; for (i = 0; i <= processes.GetUpperBound(0) - 1; i++) { myProcess = processes(i); if (!myProcess.HasExited) { try { ProcessModuleCollection modules = myProcess.Modules; int j = 0; for (j = 0; j <= modules.Count - 1; j++) { if ((modules.Item(j).FileName.ToLower.CompareTo(strFile.ToLower) == 0)) { myProcessArray.Add(myProcess); break; // TODO: might not be correct. Was : Exit For } } } catch (Exception exception) { } //MsgBox(("Error : " & exception.Message)) } } return myProcessArray; } } 

VB.Net:

 Imports System.Management Imports System.IO Module Module1 Friend myProcessArray As New ArrayList Private myProcess As Process Sub Main() Dim strFile As String = "c:\windows\system32\msi.dll" Dim a As ArrayList = getFileProcesses(strFile) For Each p As Process In a Debug.Print(p.ProcessName) Next End Sub Private Function getFileProcesses(ByVal strFile As String) As ArrayList myProcessArray.Clear() Dim processes As Process() = Process.GetProcesses Dim i As Integer For i = 0 To processes.GetUpperBound(0) - 1 myProcess = processes(i) If Not myProcess.HasExited Then Try Dim modules As ProcessModuleCollection = myProcess.Modules Dim j As Integer For j = 0 To modules.Count - 1 If (modules.Item(j).FileName.ToLower.CompareTo(strFile.ToLower) = 0) Then myProcessArray.Add(myProcess) Exit For End If Next j Catch exception As Exception 'MsgBox(("Error : " & exception.Message)) End Try End If Next i Return myProcessArray End Function End Module 

斯蒂芬的回答中有一些错误(C#部分)。

所以编辑它为C#做一个静态类 – MurderProcess 在这里输入图像描述

 public static class MurderProcess { public static void Murder(string strFile) { ArrayList a = getFileProcesses(strFile); foreach (Process p in a) { p.Kill(); p.WaitForExit(10000); } } public static ArrayList getFileProcesses(string strFile) { var myProcessArray = new ArrayList(); Process myProcess; myProcessArray.Clear(); Process[] processes = Process.GetProcesses(); int i = 0; for (i = 0; i <= processes.GetUpperBound(0) - 1; i++) { myProcess = processes[i]; if (!myProcess.HasExited) { try { ProcessModuleCollection modules = myProcess.Modules; int j = 0; for (j = 0; j <= modules.Count - 1; j++) { if ((modules[j].FileName.ToLower().CompareTo(strFile.ToLower()) == 0)) { myProcessArray.Add(myProcess); break; } } } catch { } } } return myProcessArray; } } 

简单与linq:

 public void KillProcessesAssociatedToFile(string file) { GetProcessesAssociatedToFile(file).ForEach(x => { x.Kill(); x.WaitForExit(10000); }); } public List<Process> GetProcessesAssociatedToFile(string file) { return Process.GetProcesses() .Where(x => !x.HasExited && x.Modules.Cast<ProcessModule>().ToList() .Exists(y => y.FileName.ToLowerInvariant() == file.ToLowerInvariant()) ).ToList(); }