Windows rootkti blogs

MJ001:

http://hi.baidu.com/mj0011

SUDAMI:

http://hi.baidu.com/sudami/blog/item/5ba21ceeb495a6fcb3fb9552.html

Tophet:

http://forum.eviloctal.com/thread-34574-1-1.html

http://www.harmonysecurity.com/blog/labels/Exploitation.html