This link provides a good overview of this process:
http://www.f-secure.com/weblog/archives/archive-122006.html#00001055