I believe the only way to do this is to connect to the shell.
() , - , ( Windows 7), - , , . API SetWindowsHookEx.
Vista , . , , .
windows condor :
#include <windows.h>
#pragma data_seg(".SHARDATA")
HHOOK hHook = NULL;
LONG KBkeyhitflag = 0;
#pragma data_seg()
#pragma comment(linker, "/SECTION:.SHARDATA,RWS")
__declspec(dllexport) LRESULT CALLBACK KBHook(int nCode, WPARAM wParam,
LPARAM lParam)
{
InterlockedExchange(&KBkeyhitflag,1);
return CallNextHookEx(hHook,nCode,wParam,lParam);
}
HINSTANCE g_hinstDLL = NULL;
#if defined(__cplusplus)
extern "C" {
#endif
int __declspec( dllexport) WINAPI KBInitialize(void)
{
hHook=(HHOOK)SetWindowsHookEx(WH_KEYBOARD,(HOOKPROC)KBHook,g_hinstDLL,0);
return hHook ? 1 : 0;
}
int __declspec( dllexport) WINAPI KBShutdown(void)
{
if ( UnhookWindowsHookEx(hHook) )
return 1;
else
return 0;
}
int __declspec( dllexport) WINAPI KBQuery(void)
{
if ( InterlockedExchange(&KBkeyhitflag,0) )
return 1;
else
return 0;
}
#if defined(__cplusplus)
}
#endif
BOOL WINAPI DllMain(HANDLE hInstDLL, ULONG fdwReason, LPVOID lpReserved)
{
switch (fdwReason)
{
case DLL_PROCESS_ATTACH:
g_hinstDLL = (HINSTANCE)hInstDLL;
DisableThreadLibraryCalls(g_hinstDLL);
break;
}
return 1;
}