Windows_Password_Logger

代码说明：

  windows登陆密码信息拦截，获取明文口令。程序对不同系统做了处理，在2000,2003,xp,vista上都可以截取， 在2000,2003,xp中，通过UNICODE_STRING.Length 的高8位取xor key,如果密码是编码过的，则通过ntdll.RtlRunDecodeUnicodeString解码， vista则通过AdvApi32.CredIsProtectedW判断密码是否编码过，解码用AdvApi32.CredUnprotectW。(The windows Password intercept, access to the plaintext password. Processing program on a different system in 2000, 2003, xp, vista can intercept, 2000,2003, xp UNICODE_STRING.Length high eight take xor key if the password is encoded by the ntdll.RtlRunDecodeUnicodeString decoding, vista, to judge by AdvApi32.CredIsProtectedW and password whether encoding, decoding AdvApi32.CredUnprotectW.)