Journal Journal: Saved Slashdot Topics
http://it.slashdot.org/article.pl?sid=05/02/23/1353258&threshold=4&tid=172&tid=218
Rootkit detection from Sysinternals
Real Programs don't use shared text. Otherwise, how can they use functions for scratch space after they are finished calling them?