Computing.Net > Forums > Security and Virus > Followup about Sony root kit

Computing.Net: Over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to sign up now, it's free!

Followup about Sony root kit

Reply to Message Icon

Original Message
Name: Tammy1949
Date: November 21, 2005 at 10:55:06 Pacific
Subject: Followup about Sony root kit
OS: Windows XP Pro Media Cent
CPU/Ram: Pentium 4/512 RAM
Comment:

This doesn't look so good to me and is a scary thought.

This is a few days old but for those who haven't read it yet, here is part of the story from CNET Reviews;

Dan Kaminsky, a frequent speaker at Black Hat, has done some fascinating research into Domain Name Service servers and related security threats potential to them.

Kaminsky started with a very basic premise: Sony has a root kit; all root kits phone home; phoning home requires a DNS query; DNS queries are cached. From this simple theory, Kaminsky was able to query roughly 3 million Domain Name Service servers to find traces or signatures of Sony root kits calling from their desktop and laptop PC clients back home to Sony (or some other agency) host servers. He didn't find a few thousand, nor a hundred thousand. Kaminsky found roughly 568,200 DNS servers that have signatures of the Sony root kit calling home. He states that from this figure, he can't conclusively determine how many hosts that translates into--only Sony and First4Internet know that number.

Read more here at CNET;
http://reviews.cnet.com/4520-3513_7-6388181-1.html?tag=nl.e757


I'm not ignorant, I just need more learning!


Report Offensive Message For Removal


Response Number 1
Name: Johnw
Date: November 21, 2005 at 15:51:20 Pacific
Reply: (edit)

http://www.techsupportalert.com/issues/al_current.htm

3.7 Sony Using Rootkit in Music CD DRM
This story whipped up a storm during the month after PC SysInternals Mark Russinovich discovered a rootkit installed by a Sony copy protected audio CD. "Not only had Sony put software on my system that uses techniques commonly used by malware to mask its presence, the software is poorly written and provides no means for uninstall. Worse, most users that stumble across the cloaked files with a RKR scan will cripple their computer if they attempt the obvious step of deleting the cloaked files." Sony initially tried to defend their software but finally caved in and announced they would suspend the copy protection scheme. Several security vendors have released removal tools including Microsoft who will include that capability in the their Malicious Software Removal Tool distributed via the Windows Update service.

http://www.sysinternals.com/blog/2005/10/sony-rootkits-and-digital-rights.html


Report Offensive Follow Up For Removal

Response Number 2
Name: Zenith
Date: November 22, 2005 at 11:59:27 Pacific
Reply: (edit)

Sony has since released info on how to "un-hide" thier stupid program, and has suspended delivery/sales of affected media, but as of yet, no way to uninstall it.

Search Engines Are Your Friends

Morpheus: There is a difference between knowing the path and walking the path. "The Matrix"


Report Offensive Follow Up For Removal







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home








Do you have your own blog?

Yes
No
I did before
I will soon


View Results

Poll Finishes In 5 Days.
Discuss in The Lounge
Poll History




Data Recovery Software