keyboard-Hook

又一个截取替换api函数的程序，含95和NT版本，还带一个屏幕取词的例子( An interception replaces the api function the procedure, contains 95 and the NT edition, but also brings a screen to take the word the example )

键盘钩子，比较通用的钩子方法，在热键等场合使用比较广泛。钩子也通常在屏蔽一些按键上使用(keyboard hook)

真正的驱动级键鼠模拟。 为电脑添加一对可完全编程控制的键盘鼠标. 支持 WINXP , WIN2003 , WIN2008 , VISTA , WIN7 ，WIN8 , 32位和64位操作系统。 可过时下各种游戏检测。 这个是mfc的示例和驱动(The real driver stage mouse and keyboard simulation. Add computer controlled by a fully programmable keyboard and mouse support WINXP, WIN2003, WIN2008, VISTA, WIN7, WIN8, 32-bit and 64-bit operating system. May become obsolete under the detection of a variety of games. This is mfc example and drive)

hook硬盘序列号的驱动，支持win7、xp、2000等操作系统(support win7 system)

键盘记录源码，更加底层的键盘记录程序。通过Hook API来截获键盘记录。(The keyboard, the bottom of the source record more keylogger. Through the Hook the API to intercept the keyboard records.)

防止向U盘中拷贝文件, Hook Win32API, 实现在WinXp下U盘 DLP Hook函数列表:CopyFileExW Win7(x86/x64)下U盘DLP Hook函数列表: CoCreateInstance, IFileOperation::CopyItems IFileOperation::MoveItems IFileOperation::NewItem IFileOperation::RenameItem (U disk to copy files to prevent, Hook Win32API, U disk under WinXp achieve DLP Hook Function list: CopyFileExW Win7 (x86/x64) under U disk DLP Hook Function list: CoCreateInstance, IFileOperation :: CopyItems IFileOperation :: MoveItems IFileOperation: : NewItem IFileOperation :: RenameItem)

相比WIN32，WIN64的SSDT发生了较大的变化，在WIN32下挂钩SSDT的代码已经不能在WIN64下使用了。该代码实现win64下挂钩 ssdt(Compared to the WIN32, WIN64 the SSDT occur larger hook SSDT under WIN32 code has been used in WIN64. The code to achieve win64 hook ssdt)

过GPK驱动保护,经典，简洁，网上转载，值得一学(Over GPK drive protection, classic, simple, online reprint is worth learning)

命名管道的封装MFC类,含客户端和服务器端(A named pipe to encapsulate the MFC class, including client and server)

采用钩子函数进行键盘监视，将键盘输入信息保存到一个文件中(Using the keyboard hook function monitor, keyboard input information saved to a file)