Three_rook: those slides refer to rootkits that will virtualize existing environments. They become dom0. e.g. they become the virtual machine so your old OS becomes unaware of the malicious environment. AFAIK there is no malware that can get to dom0 from a domU