Caution SONY Music CDs have trojan Malware

[Sony Music CDs install Malware]

Whether you are a web surfer or a C++ developer, if you use Windows be
cautioned about SONY music CDs. They contain 'viewer' type software that is
actually a trojan horse for a "rootkit". The licence agreement gives no
indication whatsoever that the 'viewer' software contains the implementation
of a nasty near-impossible to remove rootkit software.

http://www.sysinternals.com/blog/200...al-rights.html

http://www.techdirt.com/articles/200...514209_F.shtml

http://www.theregister.co.uk/2005/11/03/secfocus_drm/

--

Beware SONY Music CDs.
They contain "viewers" that are actually
rootkit viruses that are near impossible to
remove.
http://www.sysinternals.com/blog/200...al-rights.html
http://www.techdirt.com/articles/200...514209_F.shtml

[Dustin Cook]

Art wrote:

I thought it was the lack of a uninstall that was the big issue. Has
that been fixed? If a typical consumer/user is faced with having to
pay a expensive repair bill to have (possibly buggy) sw removed from
his PC, I'd say it's a big deal indeed.

Not the uninstall per say, just the fact the program makes an active
effort to conseal some of it's files it needs. Of course, Sony didn't
tell anybody they intended to install this wonderful little program.
That probably irked most users.

Regards,
Dustin Cook
http://bughunter.atspace.org

[Rebecca]

Dustin Cook wrote:

Towelie wrote:

Dustin - so don't buy Sony. Your choice. Why use the issue to try to
prove your perceived intellectual superiority over others?
Inferiority complex? Can't handle being contradicted?

What in the world are you talking about? I'm not trying to prove any
superiority,

That's good. You'd be laughed out of town if you did.

[relic]

Dustin Cook wrote:

relic wrote:

Justin wrote:

Relic, would you care to disprove the SysInternals page if you are
going to insult the person warning others of this?

Following attributes is not your strong suit, is it. Re-check the
thread and see if you can locate my insulting "Sony Music CDs
install Malware" anywhere.

Now fuck off.

--
Come to us with a problem only if you want help solving it.
That's what we do. Sympathy is what your girlfriends are for.

I'm still wondering <snip unread>

Didn't I just tell you to fuck off?

--
Come to us with a problem only if you want help solving it.
That's what we do. Sympathy is what your girlfriends are for.

[Dustin Cook]

James Egan wrote:

You can pick it up easily enough from regedit help which tells you the
locations of the registry hive files. Editing with (bartpe) regedit is
simply a matter of selecting one of the files and loading it to a
temporary name of your choice. Edit using regedit in the normal way to
make the changes and unmount it simply by clicking on
File->Unload_Hive.

I'm beginning to think after reading/responding to the posts in the
last few days, The people have only gotten dumber since I retired;
certainly not wiser. Dumb and mouthy...Stupid is as stupid does as they
say. They don't read before hitting post, they don't check "help" at
all, They don't do any background checking before they claim you don't
know this or that. They are helplessly stupid individuals.
Regards,
Dustin Cook
http://bughunter.atspace.org

[bughunter.dustin]

relic wrote:

Didn't I just tell you to fuck off?

And that's supposed to get what kind of response, exactly? Am I
supposed to fear you or something, kiddo? Non coding little fucktard, I
fear nothing. Instead of telling people to fuck off, fucktard, you
should try answering their questions. It certainly doesn't help your
credibility you dumb shit. I can't decide if dumb shit or fucktard
suits you better. Keep posting, I'll figure it out. :)

Where's your big bad trolling friends now you halfwit? Heh... Lurking,
saving face? Bring it, motherfuckers, bring it. - Dope :)
Regards,
Dustin Cook
(That's Raid you Relic bitch)
http://bughunter.atspace.org

[Damian]

Dustin Cook wrote:

James Egan wrote:

You can pick it up easily enough from regedit help which tells you
the locations of the registry hive files. Editing with (bartpe)
regedit is simply a matter of selecting one of the files and loading
it to a temporary name of your choice. Edit using regedit in the
normal way to make the changes and unmount it simply by clicking on
File->Unload_Hive.

I'm beginning to think after reading/responding to the posts in the
last few days, The people have only gotten dumber since I retired;
certainly not wiser. Dumb and mouthy...Stupid is as stupid does as
they say. They don't read before hitting post, they don't check
"help" at all, They don't do any background checking before they
claim you don't know this or that. They are helplessly stupid
individuals.

While your self-analysis is spot-on, don't be so hard on yourself.

Er... on second thought, with all that self-loathing, why don't you just go
neck yourself?

[bughunter.dustin]

Damian wrote:

While your self-analysis is spot-on, don't be so hard on yourself.

Your trolling skills are wearing a bit thin. If you go too much lower,
I'll need my nephew. He's 5. He would know more about rubber/glue crap
then I remember. Seems his skills and yours are about the same tho. I'm
not sure, I think he might outsmart ya. :)

Regards,
Dustin Cook
http://bughunter.atspace.org

[Dustin Cook]

Sony Music CDs install Malware wrote:

Dustin is Wrong 1. That's not 'easy' removal DustinThat's skilled removal by
someone who knows the system and registry very well as well as some of the
tools that are available.
Another poster already pointed out the sheer ease in which someone
could remove the sony material. I appreciate the compliments tho. I
don't share the concept. I don't believe what I layed out is only for
those who are skilled. If you think that's skill, then I'm sorry for
you.
Dustin is Wrong 2. And it is an infestation if special tools are needed for
a removal. A while-the-system-is running Reg key delete and file delete is
simple removal .. what you are describing is not .. what you are describing
is removing a diseased infection.

Nobody in alt.comp.virus would agree with that. You need to learn what
infection is.

Regards,
Dustin Cook
http://bughunter.atspace.org

[Art]

On 4 Nov 2005 09:48:37 -0800, "Dustin Cook"
<bu************ **@gmail.com> wrote:

I thought it was the lack of a uninstall that was the big issue. Has
that been fixed? If a typical consumer/user is faced with having to
pay a expensive repair bill to have (possibly buggy) sw removed from
his PC, I'd say it's a big deal indeed.

Not the uninstall per say, just the fact the program makes an active
effort to conseal some of it's files it needs. Of course, Sony didn't
tell anybody they intended to install this wonderful little program.
That probably irked most users.

I see Sony has offered a remover:

http://cp.sonybmg.com/xcp/english/updates.html

The other concern I've seen has been the security vulnerability
issue, which Sony, of course, disclaims. Also, I have no idea how real
or valid this might be, but the fear is that if a user is hit with
another root kit the resulting low level conflicts will render the PC
unuseable. If this is true, it would seem we're heading for eventual
legislation banning so-called cloaking technology.

Art

http://home.epix.net/~artnpeg

[Dustin Cook]

Art wrote:

I see Sony has offered a remover:

http://cp.sonybmg.com/xcp/english/updates.html

The other concern I've seen has been the security vulnerability
issue, which Sony, of course, disclaims. Also, I have no idea how real
or valid this might be, but the fear is that if a user is hit with
another root kit the resulting low level conflicts will render the PC
unuseable. If this is true, it would seem we're heading for eventual
legislation banning so-called cloaking technology.

Yes. That's what bothers me. the cloaking technology per say isn't bad.
What happens if I'm using a modified copy of VNC, and It doesn't appear
in task manager? This "rootkit" nonsense would make it illegal.

Art, refresh my memory if you don't mind. Didn't we used to call
applications that hid their presence, stealth? When did this rootkit
terminology replace that?

Regards,
Dustin Cook
http://bughunter.atspace.org