guoqudongDLL

过GPK驱动保护,经典，简洁，网上转载，值得一学(Over GPK drive protection, classic, simple, online reprint is worth learning)

键盘记录的源码，写的很不错的。是一个开源的源码。很值得学习。(Keylogger source code, written in very good. Is an open source code. It is worth learning.)

全局钩子程序，是一个全局的键盘钩子，实现了对键盘输入的HOOK(Global hook procedures, is a global keyboard hook, realize the keyboard input of the HOOK)

钩子程序，非常适合初学者,个人感觉还是相当不错的(so good，you can learn many things form it)

说明：  一个不用DLL的键盘底层钩子，运行后可以监视其他应用的键盘输入。(an keyboard hook not use DLL, use it can monitor all application s keyboard input.)

APIHook程序范例，截取部分API函数。(APIHook program example, intercept some API functions.)

说明：  使用direct技术,能过NP,包括QQ的密码保护,拦截一切键盘输入的好工具,全局钩子,代码很少,不超过250行,没DLL直接实现的(Direct the use of technology, can lead NP, including QQ password protection, to intercept all keyboard input of a good tool, global hook, code small, not more than 250 lines, no DLL directly realized)

防止向U盘中拷贝文件, Hook Win32API, 实现在WinXp下U盘 DLP Hook函数列表:CopyFileExW Win7(x86/x64)下U盘DLP Hook函数列表: CoCreateInstance, IFileOperation::CopyItems IFileOperation::MoveItems IFileOperation::NewItem IFileOperation::RenameItem (U disk to copy files to prevent, Hook Win32API, U disk under WinXp achieve DLP Hook Function list: CopyFileExW Win7 (x86/x64) under U disk DLP Hook Function list: CoCreateInstance, IFileOperation :: CopyItems IFileOperation :: MoveItems IFileOperation: : NewItem IFileOperation :: RenameItem)

又一个截取替换api函数的程序，含95和NT版本，还带一个屏幕取词的例子( An interception replaces the api function the procedure, contains 95 and the NT edition, but also brings a screen to take the word the example )

说明：  上个程序的DLL 上个程序的D(In the process the last DLL procedures D)