Description: The keyboard driver can be solved perfectly, but the chicken with the knife, the scene is a bit bigger. Actually, when you log in, Winlogon creates a new desktop and invokes the Explorer. , while the Winlogon in another called the Winlogon desktop, that is, NT of at least one desktop, see that, before you login (digression: write a virtual desktop tools, so difficult to fail you). The Ctrl + Alt + Del on the system, but also is a hotkey, except that it is positioned in the Winlogon desktop, by the same token, it also must be a window handle of the hot news, therefore, the solution came out, and if we can find this window subclassing it, ha ha, don't... . (using the ShellCode code, I provide in my computer has enumerated the four Winlogon desktop window, one of them called SAS window window, the other is what IME, etc., can guess out, SAS Windows should be). Because we want to subclass the window of the WinLogon desktop, had no choice but we should use the remote thread, was used in this article to all code injection into the WinLogon process, rather than a remote articulated DLL way, so that in the process of your development program, the file without any third party. (it should be your pleasure)
File list (Check if you may need any files):
Download