全局Mouse Hook的例子

使用APIhook拦截CreateProcess函数实现拦截启动应用程序的目的。当运行一个程序的时候，会弹出提示信息“CreateProcess”。证明该应用程序已被拦截。

一个hook的例子包含检测实例是否启动，可以选择监听那个京城-a hook examples include detecting whether to activate example, we can choose to monitor that the city etc.

天2源码 供参考 天2源码天2源码-Source for reference 2 days 2 days 2 days source source

经典的API钩挂方法，源代码，使用模块导入函数地址代换法，稳定高效。-API hook hanging classic methods, the source code, use the module import function address substitution method, stable and efficient.

加入盛大地图SQLmapinfo-join the grand maps SQLmapinfo

用钩子实现记录用户键盘、鼠标操作并重现。-hook used to achieve record keystrokes, mouse and regain the operation.

const WM_UNSUBCLASS = WM_USER + 2001 //卸载子类化消息 WM_SENDDATA = WM_USER + 2003 //收到要发送新数据包的消息 type PMyDLLVar = ^TMyDLLVar //用来共享的内存数据结构 TMyDLLVar = record SubClass: Boolean //是否已经子类化 HookWindow, SpyWindow: LongWORD //要安装HOOK的窗口及用于接收消息的窗口 hHook: LongWORD //HOOK句柄 OldWndProc: pointer //旧的窗口过程 end-const WM_UNSUBCLASS = WM_USER 2001// Uninstall subclass of news WM_SENDDATA = WM_USER 2003// received new data to be sent information packets type PMyDLLVar = ^ TMyDLLVar// used to share memory data structure TMyDLLVar = record SubClass : Boolean// if the child class of HookWindow, SpyWindow : LongWORD// HOOK to install a window for receiving news and the window hHook : LongWORD// handle OldWndProc HOOK : pointer// old process end window

对IE的操作 非常好-The operation of IE is very good

一个记录鼠标动作的小东西- A record mouse movement small thing

ActiveX+Dll制作全局键盘鼠标钩子 全局键盘鼠标钩子全局键盘鼠标钩子