When Sony installs rootkits on users PCs…
Security software engineer Mark Russinovich discovered, through the use of a program he wrote called RootkitRevealer, that drivers…
deposited on his system from a Sony BMG audio CD he purchased were using stealth techniques to hide their appearance not only from the user, but also from portions of the Windows operating system. These drivers had been installed in such a way that they were run perpetually, loaded automatically - even in safe mode - and were referenced in the Windows System Registry using a method that could not be deleted without extensive reworking of the Registry, to enable the operating system to recognize the CD-ROM drive again. In his investigation, he identified these drivers as part of the XCP copy protection system.
Bruno Kerouanton on novembre 6th 2005 in IT Security
