如果你觉得俺的方法可取,就再给你一点儿代码,是关于如何去到某个进程所运行的.exe和.dll的: System.Diagnostics.Process myProcess = System.Diagnostics.Process.GetProcessById(processID); ProcessModule myProcessModule; ProcessModuleCollection myProcessModuleCollection = myProcess.Modules; Console.WriteLine("Properties of the modules associated are:"); // Display the properties of each of the modules. for (int i = 0; i < myProcessModuleCollection.Count; i++) { myProcessModule = myProcessModuleCollection[i]; Console.WriteLine("The moduleName is " + myProcessModule.ModuleName); Console.WriteLine("The " + myProcessModule.ModuleName + "'s base address is: " + myProcessModule.BaseAddress); Console.WriteLine("The " + myProcessModule.ModuleName + "'s Entry point address is: " + myProcessModule.EntryPointAddress); Console.WriteLine("The " + myProcessModule.ModuleName + "'s File name is: " + myProcessModule.FileName); }
ProcessModule myProcessModule; ProcessModuleCollection myProcessModuleCollection = myProcess.Modules;
Console.WriteLine("Properties of the modules associated are:");
// Display the properties of each of the modules.
for (int i = 0; i < myProcessModuleCollection.Count; i++)
{
myProcessModule = myProcessModuleCollection[i];
Console.WriteLine("The moduleName is "
+ myProcessModule.ModuleName);
Console.WriteLine("The " + myProcessModule.ModuleName + "'s base address is: "
+ myProcessModule.BaseAddress);
Console.WriteLine("The " + myProcessModule.ModuleName + "'s Entry point address is: "
+ myProcessModule.EntryPointAddress);
Console.WriteLine("The " + myProcessModule.ModuleName + "'s File name is: "
+ myProcessModule.FileName);
}