Ring3 program control driver for keyboard filtering of Specified Processes

Soon after learning to drive, I was just a rough finished product and able to run it. If you are interested, you can try it and the ox will be gone:

 

Ring3Program: When notepad.exe (Notepad) is running, the startup command is sent to the driver.

 

Kernel Driver: After receiving the control code, enable keyboard filter, convert the obtained buttons into characters, and save them to the C:/1. log file.

 

You can try to close the notepad and run the ring3 program again. No matter how you press the button, the driver will not record the keyboard button.

 

Used tools: drivermonitor, dbgview, cmd.exe,

 

 

Attachment:

 

Helloddk. sys

 

Ccx.exe (ring3 Program)