Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\kbupdate] 'Startup' = 'WinlogonStartupEvent'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\kbupdate] 'DllName' = 'kbupdate.dll'
- <SYSTEM32>\drwtsn32.exe
- <SYSTEM32>\kbupdate.dll
- <SYSTEM32>\kboem32.dat
- <SYSTEM32>\crt4.dll
- <SYSTEM32>\kbdatat4.dll