RE: [Full-disclosure] the "Sony/BMG" virus

["Todd Towles" <toddtowles@xxxxxxxxxxxxxxx>]

Ferg, but that isn't the same rootkit-type technology being used on the
Windows Side. That isn't even XCP, I don't think. It is the other
copy-protection used by Sony -  Suncomm

Not surprised it installs stuff...but it isn't hiding, is it? Can you
remove it without killing your mac?

> -----Original Message-----
> From: full-disclosure-bounces@xxxxxxxxxxxxxxxxx 
> [mailto:full-disclosure-bounces@xxxxxxxxxxxxxxxxx] On Behalf Of Fergie
> Sent: Friday, November 11, 2005 8:10 AM
> To: michael.holstein@xxxxxxxxxxx
> Cc: full-disclosure@xxxxxxxxxxxxxxxxx
> Subject: Re: [Full-disclosure] the "Sony/BMG" virus
> 
> Not keeping up with the media blitz on this one? ;-)
> 
> Insofar as [just] yesterday's RootkitGate media blitz, let's review:
> 
> [1] Hackers use Sony DRM software to hide Trojan
> 
> http://fergdawg.blogspot.com/2005/11/hackers-use-sony-drm-soft
> ware-to-hide.html
> 
> [2] Sophos develops Sony DRM removal tool
> 
> http://fergdawg.blogspot.com/2005/11/sophos-develops-sony-drm-
> removal-tool.html
> 
> [3] California Sues Sony over DRM Rootkit
> 
> http://fergdawg.blogspot.com/2005/11/california-sues-sony-over
> -drm-rootkit.html
> 
> [4] EFF: Want to particpate in Sony lawsuit?
> 
> http://fergdawg.blogspot.com/2005/11/eff-want-to-particpate-in
> -sony-lawsuit.html
> 
> [5] Sony DRM CDs infect Macs, too
> 
> http://fergdawg.blogspot.com/2005/11/sony-drm-cds-infect-macs-too.html
> 
> Enjoy.
> 
> - ferg
> 
> 
> -- Michael Holstein <michael.holstein@xxxxxxxxxxx> wrote:
> 
> This didn't take long ...
> 
> http://www.cnn.com/2005/TECH/internet/11/10/sony.hack.reut/index.html
> 
> I would dearly love to see large groups of affected parties 
> join a separate class-action lawsuit against Sony, BMG, and 
> First4 for their roles in a whole new round of rootkit-enabled worms.
> 
> ~Mike.
> 
> 
> --
> "Fergie", a.k.a. Paul Ferguson
>  Engineering Architecture for the Internet  
> fergdawg@xxxxxxxxxxx or fergdawg@xxxxxxxxxxxxx  ferg's tech 
> blog: http://fergdawg.blogspot.com/
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
> 
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/