BHO sample
Post date: Jan 29, 2013 6:36:59 AM
Password: infected
----------------------------------------------------------------------------
To trace this, you should modified the below define statements to have 1.
For example, from these
#define FOLLOW_CHILD_PROCESS 0
#define TRACE_ONLY_CHILD_PROCESS 0
#define TRACE_ONLY_A_MODULE 0
#define TRACE_PARTIAL_CODE 0
to the below
#define FOLLOW_CHILD_PROCESS 1
#define TRACE_ONLY_CHILD_PROCESS 1
#define TRACE_ONLY_A_MODULE 1
#define TRACE_PARTIAL_CODE 1
You can easily understand how it works by finding each of them in the source code.