...and so it begins.
First Trojan using Sony DRM spotted
Roots you, Sir
By John Leyden
Published Thursday 10th November 2005 13:25 GMT
Virus writers have begun taking advantage of Sony-BMG's use of rootkit technology in DRM software bundled with its music CDs.
Sony-BMG's rootkit DRM technology masks files whose filenames start with "$sys$". A newly-discovered variant of the Breplibot Trojan takes advantage of this to drop the file "$sys$drv.exe" in the Windows system directory.
"This means, that for systems infected by the Sony DRM rootkit technology, the dropped file is entirely invisible to the user. It will not be found in any process and file listing. Only rootkit scanners, such as the free utility RootkitRevealer, can unmask the culprit," warns Ivan Macalintal, a senior threat analyst at security firm Trend Micro
Full article here.
That actually took longer than I expected...
Hmmm... I think it might be safer to download music instead of potentially infecting my PC by playing dodgey Sony CDs.
RootkitRevealer can be downloaded from Sysinternals if you're worried.


1 Comments:
This might explain a lot.
After all, I was the one to buy, compile, and burn the "Wedding Ska" CDs, and my computer is the only one in the household acting insane lately!
Post a Comment
Subscribe to Post Comments [Atom]
<< Home