years ago I found a bug in Process Explorer tool, written by Mark Russinovich. well, not a bug, just misfeature Process Explorer tries to determine the start address of a thread, but does this wrong and under certain conditions gives us an incorrect result. I sent a report to Mark, but had got no [...]

http://souriz.wordpress.com/2008/05/04/bug-in-process-explorer-gift-for-malware/