public ChooseForm ()
{
InitializeComponent ();
processView.ListViewItemSorter = new ProcessViewItemComparer ();
usbDevView.ListViewItemSorter = new DeviceViewItemComparer ();
processViewUpdater = new ProcessViewUpdater (processView);
usbViewUpdater = new UsbViewUpdater (usbDevView);
WqlEventQuery startQuery = new WqlEventQuery ();
startQuery.EventClassName = "Win32_ProcessStartTrace";
WqlEventQuery stopQuery = new WqlEventQuery ();
stopQuery.EventClassName = "Win32_ProcessStopTrace";
ManagementEventWatcher w = new ManagementEventWatcher (startQuery);
w.EventArrived += new EventArrivedEventHandler (ProcessEventArrived);
w.Start();
processStartWatcher = w;
w = new ManagementEventWatcher (stopQuery);
w.EventArrived += new EventArrivedEventHandler (ProcessEventArrived);
w.Start ();
processStopWatcher = w;
}
public AttachForm()
{
InitializeComponent();
processView.ListViewItemSorter = new ProcessViewItemComparer();
processViewUpdater = new ProcessViewUpdater(processView);
WqlEventQuery startQuery = new WqlEventQuery("__InstanceCreationEvent", new TimeSpan(0, 0, 1), "TargetInstance isa \"Win32_Process\"");
ManagementEventWatcher w = new ManagementEventWatcher(startQuery);
w.EventArrived += new EventArrivedEventHandler(ProcessEventArrived);
w.Start();
processStartWatcher = w;
WqlEventQuery stopQuery = new WqlEventQuery("__InstanceDeletionEvent", new TimeSpan(0, 0, 1), "TargetInstance isa \"Win32_Process\"");
w = new ManagementEventWatcher(stopQuery);
w.EventArrived += new EventArrivedEventHandler(ProcessEventArrived);
w.Start();
processStopWatcher = w;
x64NoteLbl.Visible = EasyHook.RemoteHooking.IsX64System;
}
public AttachForm()
{
InitializeComponent();
processView.ListViewItemSorter = new ProcessViewItemComparer();
processViewUpdater = new ProcessViewUpdater(processView);
WqlEventQuery startQuery = new WqlEventQuery("__InstanceCreationEvent", new TimeSpan(0, 0, 1), "TargetInstance isa \"Win32_Process\"");
ManagementEventWatcher w = new ManagementEventWatcher(startQuery);
w.EventArrived += new EventArrivedEventHandler(ProcessEventArrived);
w.Start();
processStartWatcher = w;
WqlEventQuery stopQuery = new WqlEventQuery("__InstanceDeletionEvent", new TimeSpan(0, 0, 1), "TargetInstance isa \"Win32_Process\"");
w = new ManagementEventWatcher(stopQuery);
w.EventArrived += new EventArrivedEventHandler(ProcessEventArrived);
w.Start();
processStopWatcher = w;
x64NoteLbl.Visible = EasyHook.RemoteHooking.IsX64System;
}
