Re: [MLUG] Sony DRM Rootkit Controversy

[Mike Miller <EMAIL:PROTECTED>]

On Wed, 9 Nov 2005, Mark Rages wrote:

> On 11/9/05, Mike Miller <EMAIL:PROTECTED> wrote:
> > On Tue, 8 Nov 2005, Michael wrote:
> >
> > > More interesting was that with Sony's rootkit installed you can hide 
> > > ANY program on the system by naming it this way. So all a virus or 
> > > trojan writer has to do is name their files this way and every Windows 
> > > user who has listened to a Sony CD will be unable to get rid of the 
> > > bastard without special help.
> >
> > I'm surprised by what you are saying.  Are you saying that the Sony 
> > software affects the functioning of the operating system so that files 
> > with names beginning with $sys$ are no longer detectable by Windows?
>
> That's it.

I don't quite understand this.  I guess the Sony program conceals files 
and registry keys from some programs, but there are still ways to see 
them.  Maybe it requires special software like Root Kit Revealer:

http://www.sysinternals.com/blog/2005/10/sony-rootkits-and-digital-rights.html


> For example, some people found that if you rename your cd-ripping 
> software's executable to start with $sys$, the DRM software doesn't know 
> it's running and you can rip away.

We knew that before -- that was in the earlier messages that started this 
thread.

Thanks for filling me in on this thing.  I skimmed some of the web pages 
earlier and didn't realize how deeply screwed up this Sony DRM really is!

Mike

_______________________________________________
members mailing list
EMAIL:PROTECTED
http://mlug.missouri.edu/mailman/listinfo/members