http://rootbiez.blogspot.com/2009/11/rootkit-tdl3-why-so-serious-lets-put.html
it is very interesting