The KeyGuru application was designed to be a keyboard logger for all versions of windows. This utility allows silent logging of any key pressed on the board.
KeyGuru consists of 3 files :
wklg.exe = main logging application
wklg32.dll = library used by loggin application
keyconvert.exe = decoder to decode key codes
wklg.exe , wklg32.dll are part of the main logging application...executing wklg.exe launches the keyboard logger. It is an invisible application and does not have a visible window.
By default KeyGuru logs information in a file called wlkg32lg.dll in the WindowsSystem Directory.
keyconvert.exe is used to decode and generate a human readable output for the keys pressed.
To explain how the application works consider the following scenario :
PC1 = your pc
PC2 = pc on which you want to log keystrokes
Copy wklg.exe & wklg32.dll to PC2 into any folder.
Execute wklg.exe on PC2, by double clicking on it.
wklg.exe will start executing silently (until the PC2 is shutdown of course)
Type some keys on the keyboard on PC2
If you check in the windows system directory of PC2 there will be a file created called wklg32lg.dll, this is not really a dll file but the log file created by KeyGuru.
Copy this file onto your PC (PC1).
Now run keyconvert.exe, when it launches browse and select the wklg32lg.dll file. and now press convert. In a few seconds (or minutes.. if your log file is huge..) you will get a message from keyconvert indicating that it has finished.
keyconvert.exe will create a file called output.txt in the same folder as the log file which contains the decoded output.