±±¾©Ê¯ÓÍ»¯¹¤Ñ§Ôº2026ÄêÑо¿ÉúÕÐÉú½ÓÊÕµ÷¼Á¹«¸æ
²é¿´: 662  |  »Ø¸´: 6
µ±Ç°Ö÷ÌâÒѾ­´æµµ¡£

magic7004

½ð³æ (Ö°Òµ×÷¼Ò)

[½»Á÷] ¡¾Ô­´´¡¿¹ØÓÚLow Level Keyboard Hook£¬Íò¶ñµÄSDK°¡~~

½ñÌìÒª×öµãÊÂÇ飬ÐèÒªÆÁ±ÎWin¼ü£¬ÓÚÊÇÏëµ½ÓÃWH_KEYBOARD_LL£¬Ëæ±ã¿´ÁËÏÂVS6.0×Ô´øµÄMSDNÀïLowLevelKeyboardProcµÄÃèÊö£º
The LowLevelKeyboardProc hook procedure is an application-defined or library-defined callback function used with the SetWindowsHookEx function. The system calls this function every time a new keyboard input event is about to be posted into a thread input queue. The keyboard input can come from the local keyboard driver or from calls to thekeybd_event function. If the input comes from a call to keybd_event, the input was "injected".

ÓÚÊÇдÁËÀàËÆÏÂÃæµÄ´úÂ룺
void f()
{
    HHOOK hHook = NULL;
    HANDLE hThread = NULL;
  __try
  {
       hHOOK = SetWindowHookExhInstance,WH_KEYBOARD_LL,LowLevelKeyboardProc,0);
      if£¨NULL == hHook) __leave;
      hThread=(HANDLE) _beginthread(.......);  
      if ((HANDLE)1 == hThread) __leave;
      WaitForSingleObject(hThread);
  }
  __finally
{
      if (NULL != hThread) CloseHandle(hThread);
      if (NULL != hHook) UnhookWindowsHookEx(hHook);
  }
}

½á¹û·¢ÏÖ£¬°²×°µÄHOOK²»Æð×÷Óã¬Ñо¿Á˺ܾÃÒ²²»Ã÷°×Ôõô»ØÊ£¬ÕýÔÚÓôÃÆÖУ¬Í»È»¿´µ½Win2K3µÄSDK DocumentationÀï¶ÔLowLevelKeyboardProcµÄÃèÊöÊÇ£º
The LowLevelKeyboardProc hook procedure is an application-defined or library-defined callback function used with the SetWindowsHookEx function. The system calls this function every time a new keyboard input event is about to be posted into a thread input queue. The keyboard input can come from the local keyboard driver or from calls to the keybd_event function. If the input comes from a call to keybd_event, the input was "injected". However, the WH_KEYBOARD_LL hook is not injected into another process. Instead, the context switches back to the process that installed the hook and it is called in its original context. Then the context switches back to the application that generated the event.   

Ìì°¡£¬Æ½°×Î޹ʵĶà³öÀ´Ò»¶Î£¬ÕæÊÇÍò¶ñµÄSDK°¡~~£¡
»Ø¸´´ËÂ¥

» ²ÂÄãϲ»¶

Á÷Ã¥²»¿ÉÅ£¬¿ÉŵÄÊÇÁ÷Ã¥ÓÐÎÄ»¯£¬ÓÐÎÄ»¯ÓÖBHµÄÁ÷Ã¥ÎÞµÐ~~£¡
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

ľҶÇå·ç

ľ³æ (ÕýʽдÊÖ)

¡ï ¡ï ¡ï
Сľ³æ(½ð±Ò+0.5):¸ø¸öºì°ü£¬Ð»Ð»»ØÌû½»Á÷
wangen994(½ð±Ò+2,VIP+0):ÐÁ¿àÁË£¬¼ÓÓÍ 9-10 20:35
µ¥¶ÀÆÁ±ÎÒ»¸ö¼ü¶¼»¹ºÃ£¬ÆÁ±Îctr+alt+del±È½ÏÄÑ
www.cvdelver.com
2Â¥2009-09-10 18:54:17
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

magic7004

½ð³æ (Ö°Òµ×÷¼Ò)

¡ï ¡ï
wangen994(½ð±Ò+2,VIP+0):»¶Ó­³£À´³ÌÐòÈí¼þ°æ 9-10 20:35
Ctr+Alt+DelÊÇWinlogonµÄÈȼü£¬WinlogoNÊÇSYSTEMµÄ½ø³Ì£¬Ëü²»ÔÚµ±Ç°Óû§µÄ»á»°ÖУ¬»úÖÆ²»Ò»ÑùµÄÀ²¡£
Á÷Ã¥²»¿ÉÅ£¬¿ÉŵÄÊÇÁ÷Ã¥ÓÐÎÄ»¯£¬ÓÐÎÄ»¯ÓÖBHµÄÁ÷Ã¥ÎÞµÐ~~£¡
3Â¥2009-09-10 19:48:13
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

ľҶÇå·ç

ľ³æ (ÕýʽдÊÖ)

¡ï
Сľ³æ(½ð±Ò+0.5):¸ø¸öºì°ü£¬Ð»Ð»»ØÌû½»Á÷
ÒýÓûØÌû:
Originally posted by magic7004 at 2009-9-10 19:48:
Ctr+Alt+DelÊÇWinlogonµÄÈȼü£¬WinlogoNÊÇSYSTEMµÄ½ø³Ì£¬Ëü²»ÔÚµ±Ç°Óû§µÄ»á»°ÖУ¬»úÖÆ²»Ò»ÑùµÄÀ²¡£

ºÇºÇ£¬ÊÇѽ£¬ÎÒ´ó¶þµÄʱºò°ïÀÏʦ×öÏîĿΪÁËÆÁ±ÎÕâ¸ö×éºÏ¼üŪÁËºÃ¾Ã²ÅÆÁ±Îµô
www.cvdelver.com
4Â¥2009-09-10 21:36:48
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

magic7004

½ð³æ (Ö°Òµ×÷¼Ò)

ÒýÓûØÌû:
Originally posted by ľҶÇå·ç at 2009-9-10 21:36:

ºÇºÇ£¬ÊÇѽ£¬ÎÒ´ó¶þµÄʱºò°ïÀÏʦ×öÏîĿΪÁËÆÁ±ÎÕâ¸ö×éºÏ¼üŪÁËºÃ¾Ã²ÅÆÁ±Îµô

´«ËµHOOK WINLOGONÖеÄMSGINA.DLLÖеÄij¸öAPI¾Í½â¾öÎÊÌâÁË¡£
ÓÃCreateRemoteThread×¢Èë¡£
×¼±¸Ã÷ÌìÍæÍæ¿´¡£
Á÷Ã¥²»¿ÉÅ£¬¿ÉŵÄÊÇÁ÷Ã¥ÓÐÎÄ»¯£¬ÓÐÎÄ»¯ÓÖBHµÄÁ÷Ã¥ÎÞµÐ~~£¡
5Â¥2009-09-11 00:04:32
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

ľҶÇå·ç

ľ³æ (ÕýʽдÊÖ)

¡ï
Сľ³æ(½ð±Ò+0.5):¸ø¸öºì°ü£¬Ð»Ð»»ØÌû½»Á÷
¶Ô£¬ÕâÊÇ×îÈÝÒ׵ġ£²»¹ýÎÒÃǵ±Ê±È·ÊµÕÒµ½Ò»·Ý´úÂëÖ±½Ó°ÑÕâ¸ö×éºÏ¼üÆÁ±ÎÁË£¬Ã»ÓÐhook msgina.dllÖеÄapi£¬¿ÉϧµÄÊÇÎÒ°ÑÄÇ·Ý´úÂ붪ÁË£¬²»È»¿ÉÒÔÒ»ÆðÔÙÑо¿Ñо¿
www.cvdelver.com
6Â¥2009-09-11 08:24:23
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

magic7004

½ð³æ (Ö°Òµ×÷¼Ò)

ÒýÓûØÌû:
Originally posted by ľҶÇå·ç at 2009-9-11 08:24:
¶Ô£¬ÕâÊÇ×îÈÝÒ׵ġ£²»¹ýÎÒÃǵ±Ê±È·ÊµÕÒµ½Ò»·Ý´úÂëÖ±½Ó°ÑÕâ¸ö×éºÏ¼üÆÁ±ÎÁË£¬Ã»ÓÐhook msgina.dllÖеÄapi£¬¿ÉϧµÄÊÇÎÒ°ÑÄÇ·Ý´úÂ붪ÁË£¬²»È»¿ÉÒÔÒ»ÆðÔÙÑо¿Ñо¿

¹þ¹þ£¬×Ô¼ºÐ´µÄ´úÂë½â¾öÕâ¸öÎÊÌâÁË¡£

·½·¨¾ÍÊÇ×¢ÈëWinlogon.exe£¬×¥µ½ËüµÄ´°¿ÚSAS Window£¬È»ºóÀ¹½ØÕâ¸ö´°¿ÚµÄWM_HOTKEYÏûÏ¢¾ÍOKÁË¡£
Á÷Ã¥²»¿ÉÅ£¬¿ÉŵÄÊÇÁ÷Ã¥ÓÐÎÄ»¯£¬ÓÐÎÄ»¯ÓÖBHµÄÁ÷Ã¥ÎÞµÐ~~£¡
7Â¥2009-09-11 14:18:03
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû
Ïà¹Ø°æ¿éÌø×ª ÎÒÒª¶©ÔÄÂ¥Ö÷ magic7004 µÄÖ÷Ìâ¸üÐÂ
×î¾ßÈËÆøÈÈÌûÍÆ¼ö [²é¿´È«²¿] ×÷Õß »Ø/¿´ ×îºó·¢±í
[¿¼ÑÐ] 0703»¯Ñ§µ÷¼Á£¬Çóµ¼Ê¦ÊÕ +9 ÌìÌìºÃÔËÀ´Éϰ¶° 2026-03-24 10/500 2026-03-28 22:17 by chemzp
[¿¼ÑÐ] 316Çóµ÷¼Á +7 ½­´Ç666 2026-03-26 7/350 2026-03-28 21:28 by sanrepian
[¿¼ÑÐ] Çóµ÷¼ÁÒ»Ö¾Ô¸º£´ó£¬0703»¯Ñ§Ñ§Ë¶304·Ö£¬Óдó´´ÏîÄ¿£¬Ëļ¶Òѹý +7 ÐÒÔËÁ¨Á¨ 2026-03-22 11/550 2026-03-28 20:27 by ÌÆãå¶ù
[¿¼ÑÐ] 283Çóµ÷¼Á +3 A child 2026-03-28 3/150 2026-03-28 15:41 by ms629
[¿¼ÑÐ] 304Çóµ÷¼Á +6 ÂüÊâ2266 2026-03-27 6/300 2026-03-28 14:10 by ÌÆãå¶ù
[¿¼ÑÐ] 317Çóµ÷¼Á +6 Ê®ÏÐwx 2026-03-24 6/300 2026-03-28 13:27 by Iveryant
[¿¼ÑÐ] 299Çóµ÷¼Á +7 àÅàÅàÅàÅ2 2026-03-27 7/350 2026-03-28 13:09 by ÌÆãå¶ù
[¿¼ÑÐ] ²ÄÁÏ277Çóµ÷¼Á +7 min3 2026-03-24 7/350 2026-03-28 11:39 by xuxiang
[¿¼ÑÐ] Ò»Ö¾Ô¸Äϲý´óѧ324Çóµ÷¼Á +7 hanamiko 2026-03-27 7/350 2026-03-28 09:56 by ÀîÉϰ¶0921
[¿¼ÑÐ] ²ÄÁÏÓ뻯¹¤¿¼Ñе÷¼Á +17 ‹üÈA 2026-03-22 17/850 2026-03-28 08:35 by WYUMater
[¿¼ÑÐ] 272Çóµ÷¼Á +7 ½Å»¬µÄÊØ·¨¹«Ãñ 2026-03-27 7/350 2026-03-27 17:23 by laoshidan
[¿¼ÑÐ] Ò»Ö¾Ô¸ Î÷±±´óѧ ×Ü·Ö282 Ó¢ÓïÒ»62 Çóµ÷¼Á +7 18419759900 2026-03-25 8/400 2026-03-27 16:38 by 18419759900
[¿¼ÑÐ] Çóµ÷¼Á Ò»Ö¾Ô¸ ±¾¿Æ ±±¿Æ´ó »¯Ñ§ 343 +6 13831862839 2026-03-24 7/350 2026-03-26 22:57 by ²»³Ôô~µÄ؈
[¿¼ÑÐ] 349Çóµ÷¼Á +4 Àîľ×Ó°¡¹þ¹þ 2026-03-25 4/200 2026-03-26 22:49 by fmesaito
[¿¼ÑÐ] ²ÄÁÏÓ뻯¹¤304ÇóBÇøµ÷¼Á +3 Çñgl 2026-03-26 6/300 2026-03-26 18:03 by Çñgl
[¿¼ÑÐ] 318Çóµ÷¼Á +3 plumÀî×Ó 2026-03-23 3/150 2026-03-25 09:42 by ÎíÉ¢ºóÏàÓölc
[¿¼ÑÐ] Çóµ÷¼Á +6 ÑÐÑУ¬½Óµç»° 2026-03-24 7/350 2026-03-24 17:01 by barlinike
[¿¼ÑÐ] ½ÓÊÕ2026˶ʿµ÷¼Á(ѧ˶+ר˶) +4 allen-yin 2026-03-23 6/300 2026-03-23 15:04 by Íô£¡£¿£¡
[¿¼ÑÐ] 328Çóµ÷¼Á +4 LHHL66 2026-03-23 4/200 2026-03-23 14:55 by lbsjt
[¿¼ÑÐ] 070300£¬Ò»Ö¾Ô¸±±º½320Çóµ÷¼Á +3 Jerry0216 2026-03-22 5/250 2026-03-23 09:16 by ¡£¡£ÌÃÌÃ
ÐÅÏ¢Ìáʾ
ÇëÌî´¦ÀíÒâ¼û