BHO sample

Post date: Jan 29, 2013 6:36:59 AM

Password: infected

----------------------------------------------------------------------------

To trace this, you should modified the below define statements to have 1.

For example, from these

#define FOLLOW_CHILD_PROCESS 0

#define TRACE_ONLY_CHILD_PROCESS 0

#define TRACE_ONLY_A_MODULE 0

#define TRACE_PARTIAL_CODE 0

to the below

#define FOLLOW_CHILD_PROCESS 1

#define TRACE_ONLY_CHILD_PROCESS 1

#define TRACE_ONLY_A_MODULE 1

#define TRACE_PARTIAL_CODE 1

You can easily understand how it works by finding each of them in the source code.