This could be a good read. Notice a used copy in the bottom right hand corner for 23.99. http://www.amazon.com/Rootkits-Subverting-Windows-Greg-Hoglund/dp/0321294319