Windows Service & Keylogger

This project provides a Windows service and keylogger developed in C. The service manages and controls the keylogger, which monitors and logs keystrokes and active foreground processes.

Overview

• Windows Service (svc.exe)

  • Manages service installation, start, stop, and deletion.
  • Launches the keylogger in the background.
  • Ensures single instance execution of the keylogger.

• Keylogger (winkey.exe)

  • Captures keystrokes and associated foreground process details.
  • Uses low-level hooks to monitor keyboard input.
  • Logs data in a readable format with timestamps.

Prerequisites

• Compiler: CL
• Build Tool: NMAKE
• OS: Windows 11 but should work on Windows 10

Quick Start

1. Compile the Project: Open a Developer Command Prompt and run:

   nmake

2. Install the Service (as administrator):

   .\svc.exe install

3. Start the Service (as administrator):

   .\svc.exe start

4. Check Keylogger Status:

   tasklist | Select-String "winkey"

5. Stop the Service (as administrator):

   .\svc.exe stop

6. Remove the Service (as administrator):

   .\svc.exe delete

Notes

• Disable Windows Defender if necessary for proper functionality.
• Keylogger logs are saved in keystrokes.log.