本文总结如何通过 C# 使用系统还原。
如果你不擅长中文，可以点此阅读英文版。 (翻译: If you are not good at Chinese, you can click on the link in this paragraph to read the English version.)
使用 Win32 API 创建系统还原点
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
| [StructLayout(LayoutKind.Sequential)]
public struct RESTOREPOINTINFO
{
public int dwEventType;
public int dwRestorePtType;
public Int64 llSequenceNumber;
[MarshalAs(UnmanagedType.ByValTStr, SizeConst = 257)]
public string szDescription;
}
[StructLayout(LayoutKind.Sequential)]
public struct STATEMGRSTATUS
{
public uint nStatus;
public Int64 llSequenceNumber;
}
[DllImport("SrClient.dll")]
public static extern bool SRSetRestorePoint(ref RESTOREPOINTINFO SRPInfo, ref STATEMGRSTATUS SRPStatus);
static void Main(string[] args)
{
RegistryKey SystemRestoreKey = Registry.LocalMachine.OpenSubKey("Software\\Microsoft\\Windows NT\\CurrentVersion\\SystemRestore",true);
SystemRestoreKey.SetValue("SystemRestorePointCreationFrequency", 0,RegistryValueKind.DWord);
bool result = false;
RESTOREPOINTINFO RPInfo = new RESTOREPOINTINFO();
STATEMGRSTATUS RPStatus = new STATEMGRSTATUS();
RPInfo.dwEventType = 100;
RPInfo.dwRestorePtType = 0;
RPInfo.llSequenceNumber = 0;
RPInfo.szDescription = "系统还原点";
result = SRSetRestorePoint(ref RPInfo, ref RPStatus);
SystemRestoreKey.DeleteValue("SystemRestorePointCreationFrequency");
}
|
使用 WMI 创建系统还原点
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
| private static bool CreateSRP(string RPName, int RPType, int EventType)
{
ManagementClass SRClass = new ManagementClass("//./root/default:SystemRestore");
ManagementBaseObject SRArgs = SRClass.GetMethodParameters("CreateRestorePoint");
SRArgs["Description"] = RPName;
SRArgs["RestorePointType"] = RPType;
SRArgs["EventType"] = EventType;
try
{
ManagementBaseObject outParams = SRClass.InvokeMethod("CreateRestorePoint", SRArgs, new InvokeMethodOptions(null, System.TimeSpan.MaxValue));
return true;
}
catch
{
return false;
}
}
static void Main(string[] args)
{
value = CreateSRP("系统还原点", 0, 100);
if (value == true)
{
Console.Write("Success");
}
else
{
Console.Write("Failed");
}
Console.Read();
}
|
使用 AlphaVSS 库删除所有系统还原点
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
| using System;
using System.Collections.Generic;
using System.Linq;
using Alphaleonis.Win32.Vss;
namespace SRDemoVSS
{
class Program
{
static void Main(string[] args)
{
IVssImplementation vssImplementation = VssUtils.LoadImplementation();
using (IVssBackupComponents backupComponents = vssImplementation.CreateVssBackupComponents())
{
backupComponents.InitializeForBackup(null);
backupComponents.SetContext(VssSnapshotContext.All);
IList<VssSnapshotProperties> snapshots = backupComponents.QuerySnapshots().ToArray();
if (snapshots.Count == 0)
{
Console.WriteLine("There were no shadow copies on the system.");
return;
}
try
{
foreach (VssSnapshotProperties snapshot in snapshots)
{
Console.WriteLine(
"- Deleting shadow copy {0:B} on {1} from provider {2} [{3}]...",
snapshot.SnapshotId,
snapshot.OriginalVolumeName,
snapshot.ProviderId,
snapshot.SnapshotAttributes);
backupComponents.DeleteSnapshot(snapshot.SnapshotId, false);
}
}
finally { }
}
}
}
}
|
使用 Win32 API 和 WMI 删除所有系统还原点
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
| using System;
using System.Management;
using System.Runtime.InteropServices;
namespace SRDeleteDemoAPI
{
class Program
{
[DllImport("SrClient.dll")]
public static extern int SRRemoveRestorePoint(int dwRPNum);
static void Main(string[] args)
{
try
{
ManagementObjectSearcher SRObject = new ManagementObjectSearcher("root/default", "SELECT * FROM SystemRestore");
foreach (ManagementObject SRInfo in SRObject.Get())
{
SRRemoveRestorePoint(Convert.ToInt32(SRInfo["SequenceNumber"].ToString()));
}
Console.WriteLine("Success");
}
catch (Exception)
{
Console.WriteLine("Failure");
}
}
}
}
|
使用 WMI 执行系统还原
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
| using System;
using System.Management;
public static bool RestoreFromRestorePoint(int RPNum)
{
ManagementClass SRClass = new ManagementClass("//./root/default:SystemRestore");
try
{
object[] SRArgs = { RPNum };
SRClass.InvokeMethod("Restore", SRArgs);
return true;
}
catch
{
return false;
}
}
|
使用 Win32 API 启用特定分区 (以 C 分区为例) 的系统还原
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
| using System;
using System.Runtime.InteropServices;
namespace SRTest
{
class Program
{
[DllImport("SrClient.dll")]
public static extern int EnableSR([MarshalAs(UnmanagedType.LPWStr)]string Drive);
public static void Main(string[] args)
{
Console.Write(EnableSR("C:\\"));
Console.Write("Press any key to continue . . . ");
Console.ReadKey(true);
}
}
}
|
使用 Win32 API 禁用特定分区 (以 C 分区为例) 的系统还原
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
| using System;
using System.Runtime.InteropServices;
namespace SRTest
{
class Program
{
[DllImport("SrClient.dll")]
public static extern int DisableSR([MarshalAs(UnmanagedType.LPWStr)]string Drive);
public static void Main(string[] args)
{
Console.Write(DisableSR("C:\\"));
Console.Write("Press any key to continue . . . ");
Console.ReadKey(true);
}
}
}
|
参考资料
相关内容