31 Oct 2005
Sony DRM Installs a Rootkit?

This dude is truly a Windows guru - I doubt that I could've managed to follow the trail as throughly as he did and get everything back to normal. Fortunately, there's a simpler solution. Don't buy DRM'd music or software.

SysInternals.com guru Mark Russinovich has a detailed investigation of a rootkit from Sony Music. It's installed with a DRM-encumbered music CD, Van Zant's "Get Right with the Man". (Mmmm, delicious irony!) The rootkit introduces several security holes into the system that could be exploited by others, such as hiding any executable file that starts with '$'. Russinovich also identifies several programming bugs in the method it uses to hook system calls, and chronicles the painful steps he had to take to 'exorcise the daemon' from his system.

(link) [Slashdot]

00:00 /Copywrongs | 4 comments | permanent link