A friend of mine recently had a "lot of fun" trying to uninstall a gambling blocker from a friend's laptop. He'd done most of the job identifying how it worked and with a little prompting from me used Sysinternals' Process Manager and Process Explorer to finish the job. Our discussions made me think of the problems Mark Russinovitch had with the Sony Rootkit last year and although it's not quite as well written as that, I asked my friend to write up his investigation for everyone to see. He hasn't got a blog so I've posted it here. What strikes...