Rootkit Agent.adah Anatomy and Executables Carving via Cryptoanalytical Approach

http://evilcodecave.blogspot.com/2010/01/rootkit-agentadah-anatomy-and.html

PHP/Spy.Bull Cryptanalysis of Encryption used and Threat Analysis

http://evilcodecave.blogspot.com/2009/12/phpspybull-cryptanalysis-of-encryption.html

Siberia ExploitPack and PDF Exploit Analysis

http://evilcodecave.blogspot.com/2009/12/siberia-exploitpack-and-pdf-exploit.html

DNAScan Malicious Network Activity Reverse Engineering

http://evilcodecave.blogspot.com/2009/11/dnascan-malicious-network-activity.html

Avast aswRdr.sys Kernel Pool Corruption and Local Privilege Escalation

http://evilcodecave.blogspot.com/2009/11/avast-aswrdrsys-kernel-pool-corruption.html

PHPSpyScanBot Analysis

http://evilcodecave.blogspot.com/2009/11/phpspyscanbot-analysis.html

[Crimeware] Researches Reversing about Eleonore Exploit Pack

http://evilcodecave.blogspot.com/2009/11/crimeware-researches-about-eleonore.html

[Crimeware] Researches and Reversing about Eleonore Exploit Pack

[Malware] BDS/PHP.Agent.DW.8 Dissection

[Malware] PHP-PBot Dissection

Redirection : http://evilcodecave.blogspot.com/2009/11/malware-php-pbot-dissection.html