恶意键盘记录器是在未经用户许可的情况下窃取和记录键盘输入的软件。为研究恶意键盘记录器的实现和逆向分析侦查方法,设计了一个实验。编程实现了一个基于Windows“消息钩子”和“DLL注入”的恶意键盘记录器,并通过Olly Dbg对其进行了定位、追踪与验证,完成了一次完整的逆向分析侦查。实验对Windows恶意代码分析研究有积极作用。 Malicious keyloggers are software that steals and records keyloggers without the user’s permission. In order to study the implementation of malicious keyloggers and reverse analysis and detection methods, an experiment was designed. A malicious keylogger based on Windows “Message Hook” and “DLL Injection” was programmed and completed with Olly Dbg to locate, track and validate it and complete a complete reverse-analysis scouting. Experiments on Windows malicious code analysis has a positive effect.