Spyware, viruses, & security : ROOTKIT on SONY MUSIC CD!!!

Crowman, Yes It Does !!.

by Grif Thomas  - 11/4/05 10:44 AM

I never said the "patch" will uninstall the program, (you're correct that the patch only helps "show" the files) but the second link I provided DOES take you to a "FAQ" section where you can select "Uninstalling the Software" and access a customer service link. You can then get the uninstall instructions/program to uninstall the software and still keep your CD-Rom working and visible.

Apparently you didn't scan through the FAQ section as I suggested..

Hope this helps clarify.

Grif

Crowman, Yep, Really... By 'Disk' They Mean..

by Grif Thomas  - 11/4/05 3:25 PM

...The purchased CD..NOT the entire CD-Rom..The purchased CD disk will not function on a computer unless the protection software is installed..But uninstalling the software/rootkit correctly "should" allow the CD-Rom to correctly function. Unfortunately, that's how Sony has decided to protect their copyright..In this case, it will prevent me from purchasing their CD's unless they change their tactics.

I have NOT tried the removal process myself as I have not had the rootkit software installed on any of my PC's. But the question goes both ways: Have you tried the uninstall instructions to show that they don't work?

That said, F-Secure apparently HAS tested the removal instructions as indicated in the previously listed article on this forum which can be reached by CLICKING HERE. Nothing negative was mentioned about those removal instructions. In addition, the "discoverer" of the problem, "Mark Russinovich", is currently in the process of testing the removal instructions. (CLICK HERE For That Discussion) I'll be interested to read his findings. In addition, despite ALL or our mistrust, both Sony and First4Internet have indicated the instructions will safely remove the software/rootkit.

At this point in time, until shown differently, I recommend following those instructions if removal of the software/rootkit is required.

Don't get me wrong here...Like you, I am not in support of the drive-by installation of a rootkit on the computer and I also believe they have crossed the line..ON the other hand, there is evidence that the program can be safely removed without causing disastrous effects to the computer AS LONG AS the correct instructions are followed...There are users who are looking for a solution to the problem and the solution appears to be available. As time passes, I'm sure we'll find out whether the removal instructions work as intended.

Hope this helps.

Grif

(NT) Crowman, I Agree Entirely ! Keep Up The Safe Computing.

by Grif Thomas  - 11/4/05 7:19 PM

Where is the outrage?? Sen. Hatch????

In reply to: ROOTKIT on SONY MUSIC CD!!! by R. Proffitt 

Oh, this absolutely makes my blood boil!!! As a matter of fact, I had to sit back, relax and calm down for awhile after finding out about this from CNET and placing this post.

Senator Orrin Hatch, where are you??? Does anybody (but me!) remember Hatch’s comments from a couple of years back concerning the whole P2P file – sharing debacle when the RIAA (of which SONY – BMG is a very prominent member, BTW) first started suing individual folks (customers, at that!) for copyright infringement of protected content? The image of his comments are indelibly burned in my mind and I remember them as if it were just yesterday. Hatch’s “remedy” for the situation was to ‘FRY” the computers of anyone illegally downloading copyright protected material from a P2P service. Yeah, you know, send code, presumably along with the download, that would essentially wipe the hard drive clean, render the system completely useless and inoperable, AND get rid of the offending protected content, to boot! What a most ridiculous and utterly idiotic and completely out-of-touch-with-the-reality-of-the-situation comment! And to think that, prior to that comment, I actually had respect for the man. (Now, please, no flames – the mentioned comment is NOT a direct quote --- note the lack of quotation marks --- but does accurately portray the gist of the man’s comments. I saw it on the national news, CNN, FOX, MS-NBC, can’t remember exactly which one, and it was a very short snippet. A reporter caught Hatch just as he was emerging from a Senate meeting, stuck the mic in his face and asked him about his stance on the subject. And that is what the poor delusional soul said in response.)

So, Hatch, where are you? Where is your personal outrage over this latest development? How about what is good for the goose is good for the gander? Oh, oh, I see!! It is a “BIG DEAL” when some poor, unsuspecting, innocent and harmless, little 12 year old girl downloads a song to listen to, but it is entirely OK, even redeemable and commendable, when a huge, global, money – grubbing, don’t-give-a-damn-about-their-customers, multi-billion dollar conglomerate deliberately and surreptitiously installs MALICIOUS CODE on the computer of a totally unsuspecting customer? Hatch, I’m sorry, but you have been languishing on the Senate floor WAAAAAY too long!!!! You really need to get out more.

And let’s get one thing straight, here. This *IS* MALICIOUS CODE we are talking about. THIS IS NOT DRM! The first bit of code that gets *secretly* installed on your computer if you buy one of these CDs and then listen to it in your computer CD-ROM, is a RootKit. This is what hackers, virus writers, worm developers, Trojan Horse writers (in fact a RootKit is the absolute ultimate in Trojan Horse programs!) cyber – criminals and other computer attackers are looking for on YOUR computer as they systematically and methodically scour the information highway for OPEN and VULNERABLE computers! And, now, thanks to SONY, they will find many millions more of them than before. (Just do a Google search on “RootKit” and you will find all the info you need to know, and then some.) Once in, they will steal all your personal information, such as your SS#, DL#, bank account #’s, credit card #’s, passwords, DOB, phone #’s addresses, etc, etc. And all this activity will be COMPLETELY TRANSPARENT to both you and your system. Your high – powered anti-virus app will not find it, your iron-clad firewall app will not detect it’s activity, your anti-spyware app will not see it, and, of course, your extra added protection from XP SP2 (aka eXtreme Patches, Sans Protection Too) doesn’t stand a chance!! The DRM is then installed on top of the RootKit, which keeps the DRM transparent and non – removable, unless, of course you call SONY and beg for mercy. IF you do that, it is my understanding that they (SONY) will then tell you how to remove the DRM, but the RootKit stays! The problem is that anything that then gets installed on top of (or under, whichever way you want to look at it) the RootKit also becomes transparent and non – removable. And, apparently, this particular SONY bit of code is not well-written and provides even more holes for hackers, which makes it even EASIER for them to find you and then attack your information!

Oh, and also, where is the national media on this one? Why did I have to find this out from CNET? (Thank you, CNET!!!) This should be the leading story on all the national networks and should be front page news in all the newspapers across the country! MULTI-MEGA-CORPORATION SONY LEGALLY DELIVERS MILLIONS OF COMPUTERS ACROSS THE INTERNET INTO THE HANDS OF MALICIOUS COMPUTER HACKERS WITH ILL-DEVISED CODE! I should have heard about this way before I logged in this morning to read my CNET Newsletters. It should have been a “Fox News Alert” or a CNN “Developing Story” or your local channel news “Breaking Story” or “Up To The Minute Headlines”, except that it wasn’t. Oh, and how about the self-righteous and always-overly-pompous Bill O’Reilly, who ends his show nightly with the words, “The spin stops here, ‘cause we’re lookin’ out for you!” Mum! Lookin’ out for WHO????? No, I had to find out through my email newsletters form CNET. (Again, thanks CNET!!! Oh, and BTW, if you are not signed up for any of the CNET email newsletters, you better. It appears that CNET is one of the few outlets that is keeping us apprised of info that we MUST know, info that is not getting out through regular media. Again, thanks CNET!)

Soooo… where does that leave us? No, Congress is not going to do anything and is turning a blind eye to the situation, the major media outlets are completely giving SONY a pass on this one and even our local legislators and local media outlets appear to be out to lunch! So, it always comes back to Caveat Emptor!

We, the consumers, are going to have to handle this one ourselves (again, as usual.) First off, DO NOT BUY ANY SONY – BMG CDS!!!! That should be a given. The only way we can let them know that we do not want them taking over our computers is to NOT buy from them. And I’m not talking about just the CDs with this RootKit code, but ALL SONY – BMG music. Then, don’t buy ANYTHING SONY! Movie DVDs, TVs, Receivers, Home Theater, radios, Walkman line, portable electronics, camcorders, digicams etc, and of course, the PS(&2) and ephemeral PS 3 when it comes out. Yes, I know, they do (generally) make good products (although usually more expensive than others) but in the electronics field, for instance, take a good hard look at Panasonic and Samsung, usually better values, anyway. There are many other choices out there.

We, the consumers, are going to have to hit them hard, fast and where it hurts, in the pocketbook, for them to get the message that we are fed up with chicanery such as this and that it is not acceptable corporate behavior. But, with SONY being a major global conglomerate and having their hands in many different areas, it will take literally millions upon millions of consumers, acting each and every day, with each independent buying decision to CHOOSE either a competitor’s product, or to not buy at all. And this we must do! We must make them FEEL the pressure, because we the consumer, cannot afford to lose this one! There is much more at stake here than just the security of our hard drives…………

Mark Russinovich has another Blog started.

by Marianna Schmudlach  - 11/4/05 2:28 PM

In reply to: ROOTKIT on SONY MUSIC CD!!! by R. Proffitt 

More on Sony: Dangerous Decloaking Patch, EULAs and Phoning Home

Friday, November 04, 2005

http://www.sysinternals.com/blog/2005/11/more-on-sony-dangerous-decloaking.html

Can Sony even be trusted.

In reply to: Mark Russinovich has another Blog started. by Marianna Schmudlach 

Not enough for me to buy/use any of their products any more. Hell, now I'm afraid to even follow any of their internet links for fear if being bushwacked.