A program that infect computers, destroy the data, steal personal information, get some valuable information, we focus on a particular kind of malware that is key logger. A keylogger monitors a user input and keeping a log of all keys that are pressed. There are various tracking techniques such as computer monitoring, software key stroke recorder, key stroke logger, Keyboard sniffer and snoop ware, they can track virtually any running program on a system. Some of the keylogger known as screen scrapers. This takes the snapshot of the screen. It can be defined two category hardware and software keylogger. Hence we are working on software keylogger which are monitoring on windows operating system. In this when a user performing an event (pressing a key) in the windows operating system, the keyboard driver of the operating system translate a key stroke in to a windows message is called "wm_keydown". There are four main methods developing keylogger keyboard state table method, windows keyboard hook method, kernel-based keyboard filtering driver method. in this paper we used a new method getkeystate, that is variation of windows keyboard hook method, which is unique to windows message mechanism. © Research India Publications.