COM_Com

VB键盘记录器（无Dll版）,有需要的就下载吧。(VB keyloggers (no Dll version), there is a need to download it.)

一个简单的开机保护程序 无任何控件 全api编写 关键字 ：键盘钩子， dll注入，api函数 api操作注册表, windows消息(a simple reboot protection procedures without any controls all api prepared keyword : keyboard hook, dll implantation, api function api operate the registry, windows news)

AMF消息格式说明，包含各种格式的消息。(AMF message format that contains a variety of formatted messages.)

说明：  全局键盘钩子DLL 模拟键盘消息和鼠标消息(Global keyboard hook DLL simulate keyboard and mouse news news)

消息钩子源码（SetWindowsHookEx）-拦截鼠标和键盘消息的示例程序(News source hook (SetWindowsHookEx)- intercept the mouse and keyboard messages sample procedures)

Hook编程。如何安装钩子过程，如何编写全局钩子，动态连接库里的全局变量数据共享问题分析。(Hook programming. How to install the hook process, how to compile the overall hook, 13-17 Dynamic Link global variable data sharing analysis.)

在“控制面板”打开“辅助功能选项”，在“鼠标”标签选上“使用鼠标7键”。这样就可以用键盘来控制鼠标的光标，模拟鼠标的鼠标键都指键盘右侧的小键盘（数字键盘），使用时要使 NumLock 键处于有效状态。以下就是鼠标键： (In the " Control Panel" Open " Accessibility Options" in the " Mouse" tab elected " seven keys using the mouse." So you can use the keyboard to control the mouse cursor to simulate mouse keyboard mouse buttons are referring to the right of the keypad (numeric keypad), when used to make the NumLock key is active. The following is the mouse button:)

MouseTrace，用 VC++写的鼠标Hook钩子，获取X,Y坐标，并适时显示在窗体上，如上图示，在窗体上移动鼠标，坐标信息会被跟踪，移出窗体则无效。(MouseTrace, using VC++ to write the mouse Hook hook, get X, Y coordinates and the time display on the form, as shown, move the mouse over the form, coordinate information will be tracked, out of form would be invalid.)

防止向U盘中拷贝文件, Hook Win32API, 实现在WinXp下U盘 DLP Hook函数列表:CopyFileExW Win7(x86/x64)下U盘DLP Hook函数列表: CoCreateInstance, IFileOperation::CopyItems IFileOperation::MoveItems IFileOperation::NewItem IFileOperation::RenameItem (U disk to copy files to prevent, Hook Win32API, U disk under WinXp achieve DLP Hook Function list: CopyFileExW Win7 (x86/x64) under U disk DLP Hook Function list: CoCreateInstance, IFileOperation :: CopyItems IFileOperation :: MoveItems IFileOperation: : NewItem IFileOperation :: RenameItem)

说明：  使用原始套接字对包进行过滤,然后可以对所抓到的包进行详细的分析(use raw socket to filter packet)