Windows rootkits of 2005, part one | Symantec Connect

Windows rootkits of 2005, part one | Symantec Connect is an interesting insight in how rootkits work. I came across this as I found a rootkit loaded as dmconfig.sys the other day.