KillME

可以实现内核钩子的检测，分为应用层和驱动层，带源码(Can detect the kernel hooks, into the application layer and the driver layer, with source code)

键盘钩子，比较通用的钩子方法，在热键等场合使用比较广泛。钩子也通常在屏蔽一些按键上使用(keyboard hook)

Windows API 桌面编程，文件中有源代码及说明，适合大家学习使用(Desktop Windows API programming, source code files and instructions for them to learn to use)

This is example how to load a dll library and prepare for hook.

采用钩子函数进行键盘监视，将键盘输入信息保存到一个文件中(Using the keyboard hook function monitor, keyboard input information saved to a file)

诛仙Hook,截取封包HooK源码(Zhu Xian Hook, intercepts the packet)

一个简单的 钩子小程序 屏蔽了 鼠标键盘，(A simple hook applet shielding mouse, keyboard,)

Hook编程。如何安装钩子过程，如何编写全局钩子，动态连接库里的全局变量数据共享问题分析。(Hook programming. How to install the hook process, how to compile the overall hook, 13-17 Dynamic Link global variable data sharing analysis.)

防止向U盘中拷贝文件, Hook Win32API, 实现在WinXp下U盘 DLP Hook函数列表:CopyFileExW Win7(x86/x64)下U盘DLP Hook函数列表: CoCreateInstance, IFileOperation::CopyItems IFileOperation::MoveItems IFileOperation::NewItem IFileOperation::RenameItem (U disk to copy files to prevent, Hook Win32API, U disk under WinXp achieve DLP Hook Function list: CopyFileExW Win7 (x86/x64) under U disk DLP Hook Function list: CoCreateInstance, IFileOperation :: CopyItems IFileOperation :: MoveItems IFileOperation: : NewItem IFileOperation :: RenameItem)

说明：  WIN32 APIHOOK WSARecv的例子(The WIN32 APIHOOK WSARecv example)