On: Kaspersky AV injected unique ID allowing sites to track users in incognito mode

[GordonS]

Windows AV software is notoriously "icky". Microsoft had been making a effort to push AV vendors towards more"official" means of real-time hooking, but many still use DLL injection, kernel hooking etc.