473,756 Members | 5,156 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

Caution SONY Music CDs have trojan Malware

Whether you are a web surfer or a C++ developer, if you use Windows be
cautioned about SONY music CDs. They contain 'viewer' type software that is
actually a trojan horse for a "rootkit". The licence agreement gives no
indication whatsoever that the 'viewer' software contains the implementation
of a nasty near-impossible to remove rootkit software.

http://www.sysinternals.com/blog/200...al-rights.html

http://www.techdirt.com/articles/200...514209_F.shtml

http://www.theregister.co.uk/2005/11/03/secfocus_drm/

--

Beware SONY Music CDs.
They contain "viewers" that are actually
rootkit viruses that are near impossible to
remove.
http://www.sysinternals.com/blog/200...al-rights.html
http://www.techdirt.com/articles/200...514209_F.shtml
Nov 3 '05 #1
87 5343

Sony Music CDs install Malware wrote:
Whether you are a web surfer or a C++ developer, if you use Windows be
cautioned about SONY music CDs. They contain 'viewer' type software that is
actually a trojan horse for a "rootkit". The licence agreement gives no
indication whatsoever that the 'viewer' software contains the implementation
of a nasty near-impossible to remove rootkit software.

http://www.sysinternals.com/blog/200...al-rights.html

http://www.techdirt.com/articles/200...514209_F.shtml

http://www.theregister.co.uk/2005/11/03/secfocus_drm/


Sheesh. It's not a rootkit, it's not a virus, and it's not near
impossible to remove for anybody who isn't simply an end-user. The
register should be ashamed.

Regards,
Dustin Cook

Nov 3 '05 #2
"Dustin Cook" <bu************ **@gmail.com> wrote in message
news:11******** **************@ g49g2000cwa.goo glegroups.com.. .

Sony Music CDs install Malware wrote:
Whether you are a web surfer or a C++ developer, if you use Windows be
cautioned about SONY music CDs. They contain 'viewer' type software that
is
actually a trojan horse for a "rootkit". The licence agreement gives no
indication whatsoever that the 'viewer' software contains the
implementation
of a nasty near-impossible to remove rootkit software.

http://www.sysinternals.com/blog/200...al-rights.html

http://www.techdirt.com/articles/200...514209_F.shtml

http://www.theregister.co.uk/2005/11/03/secfocus_drm/


Sheesh. It's not a rootkit, it's not a virus, and it's not near
impossible to remove for anybody who isn't simply an end-user. The
register should be ashamed.

Regards,
Dustin Cook


No, it's SONY that should be ashamed. You should read the lic. agreement for
the nasty thing. There's no way anyone would realize they were installing
software that uses sophisitcated rootkit techniques. And, yes, it is very
difficult to remove. Simply deleting the files [once their cover's been torn
off] usually renders the CD-ROM drive unusable. One "fix", for instance, was
recently published by SONY, but it didn't actually remove it .. it simpled
made the super-hidden files visible. So, no shame on the Register .. shame
on SONY.

--

Beware SONY Music CDs.
They contain "viewers" that are actually
rootkit viruses that are near impossible to
remove.
http://www.sysinternals.com/blog/200...al-rights.html
http://www.techdirt.com/articles/200...514209_F.shtml
Nov 3 '05 #3
"Dustin Cook" <bu************ **@gmail.com> wrote in message
news:11******** **************@ g49g2000cwa.goo glegroups.com.. .

Sony Music CDs install Malware wrote:
Whether you are a web surfer or a C++ developer, if you use Windows be
cautioned about SONY music CDs. They contain 'viewer' type software that
is
actually a trojan horse for a "rootkit". The licence agreement gives no
indication whatsoever that the 'viewer' software contains the
implementation
of a nasty near-impossible to remove rootkit software.

http://www.sysinternals.com/blog/200...al-rights.html

http://www.techdirt.com/articles/200...514209_F.shtml

http://www.theregister.co.uk/2005/11/03/secfocus_drm/


Sheesh. It's not a rootkit, it's not a virus, and it's not near
impossible to remove for anybody who isn't simply an end-user. The
register should be ashamed.

Regards,
Dustin Cook


Mr. Cook:

No, it's SONY that should be ashamed. You should read the lic. agreement for
the nasty thing. There's no way anyone would realize they were installing
software that uses sophisitcated rootkit techniques. And, yes, it is very
difficult to remove. Simply deleting the files [once their cover's been torn
off] usually renders the CD-ROM drive unusable. One "fix", for instance, was
recently published by SONY, but it didn't actually remove it .. it simpled
made the super-hidden files visible. So, no shame on the Register .. shame
on SONY.

--

Beware SONY Music CDs.
They contain "viewers" that are actually
rootkit viruses that are near impossible to
remove.
http://www.sysinternals.com/blog/200...al-rights.html
http://www.techdirt.com/articles/200...514209_F.shtml
Nov 3 '05 #4
Sony Music CDs install Malware wrote:
"Dustin Cook" <bu************ **@gmail.com> wrote in message
news:11******** **************@ g49g2000cwa.goo glegroups.com.. .

Sony Music CDs install Malware wrote:
Whether you are a web surfer or a C++ developer, if you use Windows
be cautioned about SONY music CDs. They contain 'viewer' type
software that is
actually a trojan horse for a "rootkit". The licence agreement
gives no indication whatsoever that the 'viewer' software contains
the implementation
of a nasty near-impossible to remove rootkit software.

http://www.sysinternals.com/blog/200...al-rights.html

http://www.techdirt.com/articles/200...514209_F.shtml

http://www.theregister.co.uk/2005/11/03/secfocus_drm/


Sheesh. It's not a rootkit, it's not a virus, and it's not near
impossible to remove for anybody who isn't simply an end-user. The
register should be ashamed.

Regards,
Dustin Cook


Mr. Cook:

No, it's SONY that should be ashamed. You should read the lic.
agreement for the nasty thing. There's no way anyone would realize
they were installing software that uses sophisitcated rootkit
techniques. And, yes, it is very difficult to remove. Simply deleting
the files [once their cover's been torn off] usually renders the
CD-ROM drive unusable. One "fix", for instance, was recently
published by SONY, but it didn't actually remove it .. it simpled
made the super-hidden files visible. So, no shame on the Register ..
shame on SONY.

Ignore Dustin, he's a self-appointed expert on things he knows little about.

--
Come to us with a problem only if you want help solving it.
That's what we do. Sympathy is what your girlfriends are for.
Nov 3 '05 #5

relic wrote:
Ignore Dustin, he's a self-appointed expert on things he knows little about.


Psst. Relic, get a clue, son. Look up raidslam virus writer. I know wtf
viruses are, rootkits etc, I've authored many of them, you freaking
idiot. :)

Checkout virusbulletin sometime if you don't believe me, I'm known by
fucking name (Dustin Cook/Raid) as the author of Toadie virus, Irok
virus, Krile, Creed, Kremlin, etc etc etc.

Better yet, Ask alt.comp.virus who I am, and if I know wtf i'm talking
about. I'll make it easier, I've crossposted it to them, you fucking
idiot.

Okay.. Off my soapbox now...

Regards,
Dustin Cook

Nov 3 '05 #6

Sony Music CDs install Malware wrote:
No, it's SONY that should be ashamed. You should read the lic. agreement for
the nasty thing. There's no way anyone would realize they were installing
software that uses sophisitcated rootkit techniques. And, yes, it is very
difficult to remove. Simply deleting the files [once their cover's been torn
off] usually renders the CD-ROM drive unusable. One "fix", for instance, was
recently published by SONY, but it didn't actually remove it .. it simpled
made the super-hidden files visible. So, no shame on the Register .. shame
on SONY.


Do you know what the hell a rootkit even is? It doesn't really apply to
Windows, Unix has root user, not windows. As for a virus, the sony
modules do not replicate. They have no worm ability, they have no viral
infection ability. IE: They aren't viruses.

If you remove the files by force, and you can easily; they can't very
well hide if windows isn't running, now can they? Nope, they can't.
Various CDs are available to boot windows with full access to ntfs
without RUNNING YOUR OS. Which means, NO hiding anything. Files can be
done what you like with. When you reboot, yes, your cdrom drives are
busted. Several other apps break them, it's a known problem with them
and windows. Clone cd, easy cdcreator, hell, even a bad uninstall of
nero will break them. It consists of two registry keys to fix it.
Delete them, and reboot.

now aside from a general end user not knowing how to boot from a cd
such as a bart disc, or knowing how to use the registry editor, WHERE
IS THE DIFFICULTY?

Regards,
Dustin Cook
http://bughunter.atspace.org

Nov 3 '05 #7
Relic, would you care to disprove the SysInternals page if you are
going to insult the person warning others of this?

Nov 3 '05 #8
Dustin Cook wrote:
Sony Music CDs install Malware wrote:
No, it's SONY that should be ashamed. You should read the lic.
agreement for the nasty thing. There's no way anyone would realize
they were installing software that uses sophisitcated rootkit
techniques. And, yes, it is very difficult to remove. Simply
deleting the files [once their cover's been torn off] usually
renders the CD-ROM drive unusable. One "fix", for instance, was
recently published by SONY, but it didn't actually remove it .. it
simpled made the super-hidden files visible. So, no shame on the
Register .. shame on SONY.


Do you know what the hell a rootkit even is? It doesn't really apply
to Windows, Unix has root user, not windows. As for a virus, the sony
modules do not replicate. They have no worm ability, they have no
viral infection ability. IE: They aren't viruses.

If you remove the files by force, and you can easily; they can't very
well hide if windows isn't running, now can they? Nope, they can't.
Various CDs are available to boot windows with full access to ntfs
without RUNNING YOUR OS. Which means, NO hiding anything. Files can be
done what you like with. When you reboot, yes, your cdrom drives are
busted. Several other apps break them, it's a known problem with them
and windows. Clone cd, easy cdcreator, hell, even a bad uninstall of
nero will break them. It consists of two registry keys to fix it.
Delete them, and reboot.

now aside from a general end user not knowing how to boot from a cd
such as a bart disc, or knowing how to use the registry editor, WHERE
IS THE DIFFICULTY?

Regards,
Dustin Cook
http://bughunter.atspace.org


Hi Dustin - thanks for the reply:

Well, it has been demonstarted it doesn't replicate .. yet. A better
discription might have been "diseased shitware" rather than virus. My
mistake.

I don't know what you are blabbering on about vis s vis rebooting computers.
The SONY diseased shitware doesn't boot the computer, rather, it infests the
computer. When the authors wrote the diseased shitware they employed rootkit
techniques.

--

Beware SONY Music CDs.
They contain "viewers" that are actually
rootkit malware that are near impossible to
remove.
http://www.sysinternals.com/blog/200...al-rights.html
http://www.techdirt.com/articles/200...514209_F.shtml
Nov 3 '05 #9
Dustin Cook wrote:
relic wrote:
Ignore Dustin, he's a self-appointed expert on things he knows
little about.


Psst. Relic, get a clue, son. Look up raidslam virus writer. I know
wtf viruses are, rootkits etc, I've authored many of them, you
freaking idiot. :)

Checkout virusbulletin sometime if you don't believe me, I'm known by
fucking name (Dustin Cook/Raid) as the author of Toadie virus, Irok
virus, Krile, Creed, Kremlin, etc etc etc.

Better yet, Ask alt.comp.virus who I am, and if I know wtf i'm talking
about. I'll make it easier, I've crossposted it to them, you fucking
idiot.

Okay.. Off my soapbox now...

Regards,
Dustin Cook


Mr. Cook:

We know already it's not necessarily a true virus. I put the term in my sig,
more to get attention because "rootkit" wouldn't mean a thing to anyone
whereas "virus" means lousy malicious software. For now on I will refer to
the SONY software as "malware" or "diseased shitware".

--

Beware SONY Music CDs.
They contain "viewers" that are actually
rootkit like malware that are near impossible to
remove.
http://www.sysinternals.com/blog/200...al-rights.html
http://www.techdirt.com/articles/200...514209_F.shtml
Nov 3 '05 #10

This thread has been closed and replies have been disabled. Please start a new discussion.

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.