how could you detect if there is a keystoke recorder running ?

i suppose you could hook the api, but is there another way?

Posted on 2003-03-17 21:50:32 by __anti_code_
Use a WH_DEBUG hook, that way you can monitor all hook activity on the system. Just check the wParam for a WH_KEYBOARD or WH_JOURNALRECORD hook in your DebugProc. Return non-zero to block the hook.

Posted on 2003-03-17 22:16:32 by donkey
ahh yes.

thanx a lot!
Posted on 2003-03-18 11:09:55 by __anti_code_