The SONY CD Root Kit System

[Michael C]

"Archades" <archades54@gmail.com> wrote in message
news:dlcbj5$9kc$1@austar-news.austar.net.au...

there is already 1 virus/nasty taking advantage of the rootkit, all u need
to do is put $sys$ in the filename of a program and it's hidden from
windows, virus scanners, etc, however most virus scanners have flagged the
sony rootkit (xcp, developed by first 4 internet) as a virus and i think
they have removal tools. nasty piece of software, World of
Warcraft's(online game) Warden anti cheating system fails to see programs
that have been named with $sys$ allowing ppl to cheat.

a few states in usa have started legal proceedings against sony bmg, and
reading the eula is quite interesting

The thing I'm interested to know, is the hack.tool.root.kit virus anything
to do with this or just share a similar name. How can I find out which virus
have taken advantage of sony's software?

Michael

 

[Mitchell McCreath]

Sony have removed the protetection software from production...............

Mitch.....


"John" <sittingbythepool@internode.on.net> wrote in message
news:43773653.88C5D89C@internode.on.net...

Anyone have any opinions on what SONY / BMG have done
with CD protection on recently released music CDs?

I have read a hell of a lot of stuff online in various forums.

Anyone actually been hit with one of these CDs?

 

[Archades]

Michael C wrote:

"Archades" <archades54@gmail.com> wrote in message
news:dlcbj5$9kc$1@austar-news.austar.net.au...

there is already 1 virus/nasty taking advantage of the rootkit, all u need
to do is put $sys$ in the filename of a program and it's hidden from
windows, virus scanners, etc, however most virus scanners have flagged the
sony rootkit (xcp, developed by first 4 internet) as a virus and i think
they have removal tools. nasty piece of software, World of
Warcraft's(online game) Warden anti cheating system fails to see programs
that have been named with $sys$ allowing ppl to cheat.

a few states in usa have started legal proceedings against sony bmg, and
reading the eula is quite interesting


The thing I'm interested to know, is the hack.tool.root.kit virus anything
to do with this or just share a similar name. How can I find out which virus
have taken advantage of sony's software?

Michael

http://news.bbc.co.uk/2/hi/technology/4427606.stm explains it

 

[Archades]

Mitchell McCreath wrote:

Sony have removed the protetection software from production...............

Mitch.....


"John" <sittingbythepool@internode.on.net> wrote in message
news:43773653.88C5D89C@internode.on.net...

Anyone have any opinions on what SONY / BMG have done
with CD protection on recently released music CDs?

I have read a hell of a lot of stuff online in various forums.

Anyone actually been hit with one of these CDs?






and they also released a tool to remove the program, however leaving in

some drm software....
http://www.theregister.co.uk/2005/11/03/sony_rootkit_drm/
"However, the patch that Sony will offer doesn't remove the 'rootkit'
DRM: it only makes the hidden files visible."

 

[Lord-Data]

"Michael C" <nospam@nospam.com> wrote in message
news:4379d306$0$18232$afc38c87@news.optusnet.com.au...

"Archades" <archades54@gmail.com> wrote in message
news:dlcbj5$9kc$1@austar-news.austar.net.au...
there is already 1 virus/nasty taking advantage of the rootkit, all u
need to do is put $sys$ in the filename of a program and it's hidden from
windows, virus scanners, etc, however most virus scanners have flagged
the sony rootkit (xcp, developed by first 4 internet) as a virus and i
think they have removal tools. nasty piece of software, World of
Warcraft's(online game) Warden anti cheating system fails to see programs
that have been named with $sys$ allowing ppl to cheat.

a few states in usa have started legal proceedings against sony bmg, and
reading the eula is quite interesting

The thing I'm interested to know, is the hack.tool.root.kit virus anything
to do with this or just share a similar name. How can I find out which
virus have taken advantage of sony's software?

The name "Rootkit" is a generic term .. its basically a system that allows
something to bypass an operating systems inbuilt security/protection
systems. The name harsk back to unix systems where it was more a tool to
allow a "user" to operate something as "root" (admin), when they wern't
supposed to. Same applies to windows, in a looser sense. From the name
"hack.tool.root.kit" it doesn't actually sound like a virus. A lot of virus
scanners flag "hack tools" and similar things as viruses, simply because
they are bad. that sounds more like its flaggd a suspect tool thats known to
be used for bad things .. check the website of your virus scanner, most have
a searcable database with more information on eveyrthing they flag..

http://securityresponse.symantec.com/avcenter/venc/data/hacktool.rootkit.html

^^^ Thats what your dealing with

Michael