找了个注册表监视类，与大家分享。

无意间找到一个外国佬NB写的一个注册表监视类
拿出来和大家一起学习
代码如下：
-----------------------
using System;
using System.Threading;
using System.Reflection;
using System.Runtime.InteropServices;
using Microsoft.Win32;
using System.Diagnostics;namespace RegistryUtils
{
public enum RegChangeNotifyFilter
{
Key = 1,//REG_NOTIFY_CHANGE_NAME = 1
Attribute = 2,//REG_NOTIFY_CHANGE_ATTRIBUTES = 2
Value = 4,//REG_NOTIFY_CHANGE_LAST_SET = 4
Security = 8,//REG_NOTIFY_CHANGE_SECURITY = 8
} public class RegistryMonitor : IDisposable
{
#region DllImport
[DllImport("advapi32.dll")]
private static extern Int32 RegNotifyChangeKeyValue(IntPtr hKey, bool bWatchSubtree, RegChangeNotifyFilter dwNotifyFilter, IntPtr hEvent, bool fAsynchronous);
#endregion
#region Event handling
public event EventHandler RegChanged;
public event System.IO.ErrorEventHandler Error;
#endregion
#region Private member variables
private RegistryKey registryKey;
private Thread thread;
private AutoResetEvent eventNotify = new AutoResetEvent(false);
private ManualResetEvent eventTerminate = new ManualResetEvent(false);
private RegChangeNotifyFilter regFilter = RegChangeNotifyFilter.Key | RegChangeNotifyFilter.Attribute | RegChangeNotifyFilter.Value | RegChangeNotifyFilter.Security;
private Exception thrownException = null;
#endregion
public RegistryMonitor(RegistryKey registryKey)
{
this.registryKey = registryKey;
}
public RegistryMonitor()
{
}
public void Dispose()
{
Stop();
} public RegChangeNotifyFilter RegChangeNotifyFilter
{
get { return regFilter; }
set
{
if (IsMonitoring)
throw new InvalidOperationException("Monitoring thread is already running");
regFilter = value;
}
}
public RegistryKey RegistryKey
{
get { return registryKey; }
set
{
if (IsMonitoring)
throw new InvalidOperationException("Monitoring thread is already running"); registryKey = value;
}
}
public Exception ThrownException
{
get { return thrownException; }
}
public bool IsMonitoring
{
get { return thread != null; }
}
public static IntPtr GetRegistryHandle(RegistryKey registryKey)
{
Type type = registryKey.GetType();
FieldInfo fieldInfo = type.GetField("hkey", BindingFlags.Instance | BindingFlags.NonPublic);
return (IntPtr)fieldInfo.GetValue(registryKey);
}
private bool WaitForChange()
{
WaitHandle[] waitHandles = new WaitHandle[] { eventNotify, eventTerminate };
Int32 retValue = RegNotifyChangeKeyValue(GetRegistryHandle(registryKey), true, regFilter, eventNotify.Handle, true);
if (retValue == 0)
{
return WaitHandle.WaitAny(waitHandles) == 0;
}
else
{
throw new System.ComponentModel.Win32Exception(retValue, "RegNotifyChangeKeyValue");
}
}        
public void Start()
{
if (!IsMonitoring)
{
eventTerminate.Reset();
thread = new Thread(new ThreadStart(ThreadLoop));
thread.IsBackground = true;
thread.Start();
}
}
public void Stop()
{
if (IsMonitoring)
{
eventTerminate.Set();
thread.Join();
thread = null;
}
}
private void ThreadLoop()
{
try
{
while (!eventTerminate.WaitOne(0, true))
{
if (WaitForChange())
{
if (RegChanged != null)
RegChanged(this, EventArgs.Empty);
}
}
}
catch (Exception e)
{
thrownException = e; if (Error != null)
Error(this, new System.IO.ErrorEventArgs(e)); thread = null;
}
}
}
}