TDSS / TDL3 / TDL4 analysis

[SysAdMini]

Defeating x64: The Evolution of the TDL Rootkit
http://www.slideshare.net/matrosov/defeating-x64-the-evolution-of-the-tdl-rootkit

[SysAdMini]

TDSS loader now got "legs"
http://www.securelist.com/en/blog/208188095/TDSS_loader_now_got_legs

[SysAdMini]

TDL Tracking: Peer Pressure
http://blog.eset.com/2011/06/27/tdl-tracking-peer-pressure

[SysAdMini]

TDL4 – Top Bot
http://www.securelist.com/en/analysis/204792180/TDL4_Top_Bot

[SysAdMini]

TDSS and hacking the hackers
http://blog.eset.com/2011/06/06/tdss-and-hacking-the-hackers

TdlFsReader - tool for dumping TDL file system
http://eset.ru/tools/TdlFsReader.exe

[SysAdMini]

TDSS:TDL-4 - Bootkit - 101 Approach - Part 1
http://danuxx.blogspot.com/2011/03/tdsstdl-4-bootkit-101-approach-part-1.html

[rkhunter]

Description one of the first TDL3 samples from Dr.Web
http://www.drweb.com/static/BackDoor.Tdss.565_(aka%20TDL3)_en.pdf

[SysAdMini]

A tale of grannies, Chinese herbs, Tom Cruise, Alureon and steganography[/u
http://blogs.technet.com/b/mmpc/archive/2011/09/25/a-tale-of-grannies-chinese-herbs-tom-cruise-alureon-and-steganography.aspx

[SysAdMini]

TDL4 rebooted
http://blog.eset.com/2011/10/18/tdl4-rebooted

[SysAdMini]

TDSS Bootkit Spawns Clones
http://labs.bitdefender.com/?p=830

[SysAdMini]

TDL4 reloaded: Purple Haze all in my brain
http://blog.eset.com/2012/02/02/tdl4-reloaded-purple-haze-all-in-my-brain

[SysAdMini]

Olmasco bootkit: next circle of TDL4 evolution (or not?)
http://blog.eset.com/2012/10/18/olmasco-bootkit-next-circle-of-tdl4-evolution-or-not