Sign in to follow this  
Followers 0
AgentSmith15

AutoIt Blocked

3 posts in this topic

#1 ·  Posted (edited)

Hey everyone,

I have a program that is blocking AutoIt and AHK and the like. This unfortunatly legit program is utilizes a rootkit to hide itself and it's drivers that it loads and injects itself into every process in the process list. I guess my question boils down to does AutoIt use drivers to emulate keystrokes and mouse movement? Is that how AutoIt is blocked or are there otherways as well?

I guess the program is hooking User32.dll and catching all the sendkeys? Is there a another way?

EDIT: I'm sorry for posting in the "Developer Chat" because this has nothing to do with developing, but this is the place where people know the source inside and out. Thank you for your time and consideration.

Edited by AgentSmith15

Share this post


Link to post
Share on other sites



AutoIt uses mouse and keyboard "events". It uses the function SendInput (if I remember correctly) and that single function may be hooked.

Share this post


Link to post
Share on other sites

I'm curious, what program/game would you download knowing that it's installing a rootkit, and taking control away from you?

I can see this being a training exercise in a virtual environment, but you're posting as if it is on your main PC.


[center]Common sense plays a role in the basics of understanding AutoIt... If you're lacking in that, do us all a favor, and step away from the computer.[/center]

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0