Hardware Analysis Community Forums http://www.hardwareanalysis.com/content/topic/51581/ 2009-11-24T23:15:57-05:00 http://www.hardwareanalysis.com/content/topic/51581/ /images/halogo.gif text/html 2005-11-15T22:00:45-05:00 Adam Kolak http://www.hardwareanalysis.com/content/topic/51581/#349098 I think Sony should really pay for any damages they caused. And hopefully they learned there lesson and will Never Ever use any kind of DRM B$ again. text/html 2005-11-15T21:34:07-05:00 Hans Moleman http://www.hardwareanalysis.com/content/topic/51581/#349091 Sony... Damn whores... text/html 2005-11-15T20:50:40-05:00 angryhippy http://www.hardwareanalysis.com/content/topic/51581/#349085 Anti-Virus software doesn't detect rootkits. You need a specific program. Microsoft is the only one that includes rootkit detection in its monthly Malicious Software Removal Tool. Other than that you need to be using something specific like RootkitRevealer from sysinternal <br /> <a class="ext" href="/action/r/http://www.sysinternals.com/Utilities/RootkitRevealer.html" target="_blank">http://www.sysinternals.com/Utilities/RootkitRevealer.html</a><br /> or BlackLight from F-Secure<br /> <a class="ext" href="/action/r/http://www.f-secure.com/blacklight/" target="_blank">http://www.f-secure.com/blacklight/</a> text/html 2005-11-15T20:24:15-05:00 ian elliott http://www.hardwareanalysis.com/content/topic/51581/#349074 If it exibits virus characterists I'm sure it will be zapped like the first.<br /> <br /> Anyway I'm in Europe<br /> <br /> Don't worry be happy.<br /> <br /> text/html 2005-11-15T20:22:52-05:00 DarK_SlayeR http://www.hardwareanalysis.com/content/topic/51581/#349072 Damn Payton, you are on the ball!! Good job!! text/html 2005-11-15T20:20:55-05:00 angryhippy http://www.hardwareanalysis.com/content/topic/51581/#349069 That was just for the first one. This one just hit the fan today. text/html 2005-11-15T20:18:13-05:00 ian elliott http://www.hardwareanalysis.com/content/topic/51581/#349066 good news, Microsoft will remove it.<br /> <br /> <a class="ext" href="/action/r/http://news.zdnet.co.uk/internet/security/0,39020375,39236971,00.htm" target="_blank">http://news.zdnet.co.uk/internet/security/0,39020375,39236971,00.htm</a> text/html 2005-11-15T20:05:51-05:00 angryhippy http://www.hardwareanalysis.com/content/topic/51581/#0 All the flap over Sony BMGs DRM over the last couple of weeks saw apologies from Sony, a promise they would stop using the DRM that contained the rootkit, and a fix to &quot;unclock&quot; the offending program.<br /> <br /> What they didn't tell you is that they are also using another DRM from SunnComm called MediaMax DRM. Hard to believe isn't it. But wait, this one is even worse. Kind of a 1 2 punch rootkit/phones home. Not funny. The only thing funny is the program uses the LAME mp3 encoder. And since no credit is given to LAME, the program violates the GPL of the open source encoder, leaving Sony open to copyright infringment suits. I'm just blown away. But wait theres even more. Read the whole story and get a handle on how bad stuff really is. This new DRM includes an EULA to sign. If you sign it, the DRM becomes a start up item. If you don't, the program installs anyway. Read on:<br /> <br /> Sony's DRM: It Just Keeps Getting Worse<br /> By Larry Loeb<br /> November 14, 2005<br /> Updated: Just when you thought Sony's DRM mess was bad enough, along comes SunnComm's MediaMax DRM.<br /> <br /> When I wrote last week about Sony DRM mess, I opined that it would serve MBAs of the future as a textbook example of how not to do things. <br /> <br /> <br /> It turns out that there's even more things that Sony is doing, without permission, to their customers' computers with another DRM system.<br /> <br /> People more savvy than me about Windows (like J. Alex Halderman) have discovered that SunnComm's MediaMax DRM installs itself on Windows systems as well as Mac systems. <br /> <br /> While most attention has been focused on the XCP rootkit that the Sony/BMG installs on PCs, this additional DRM has been flying under the radar in the Windows world.<br /> <br /> The DRM acts like a virus in many ways. When a Sony DRM-protected CD is inserted, the autorun feature of Windows immediately invokes a program called PlayDisc.exe. <br /> <br /> Though it displays a EULA, all the files the DRM needs are inserted on the hard drive at C:\Program Files\Common Files\SunnComm Shared\ before the EULA appears. <br /> <br /> The only difference detected thus far between accepting and rejecting the EULA is that acceptance causes the DRM to launch every time the OS starts up. <br /> <br /> The DRM files remain installed on the hard disk even if the EULA is declined. <br /> <br /> Like a virus, there is no meaningful uninstaller available. Now, some of the DRM protected CDs will indeed add an entry for SunnComm to the Add/Remove control panel. <br /> <br /> continued here: <a class="ext" href="/action/r/http://www.security.ithub.com/article/Sonys+DRM+It+Just+Keeps+Getting+Worse/165201_1.aspx?kc=ewnws111505dtx1k0000599" target="_blank">http://www.security.ithub.com/article/Sonys+DRM+It+Just+Keeps+...x1k0000599</a><br /> <br /> Running a Mac and laughing at all the windows geeks? Sorry dude. It auto installs on yours too, if you're running OSX Details at Sony's DRM Rootkit Comes in Mac Flavor, Too<br /> <a class="ext" href="/action/r/http://www.security.ithub.com/article/Sonys+DRM+Rootkit+Comes+in+Mac+Flavor+Too/165172_1.aspx" target="_blank">http://www.security.ithub.com/article/Sonys+DRM+Rootkit+Comes+...172_1.aspx</a>