Thread: uninstallable software from sony cds

Grumble Grumble Grumble

Sony claims that their no longer using this copy protection scheme, and have switched to something else... Still, installing a root kit on your machine isn't a nice thing to do...

Related CNET news article...
http://news.com.com/Sony+to+patch+co...?tag=nefd.lede

The thing with that is , if you want it removed you'll have to contact Sony and they will need your info before they direct you to a link to remove the file. Once removed, of course you can't use the CD anymore. Which in some cases, you can't return it or get a full refund. Also, when buying the CDs it does not say it'll install a root kit, you'll have to buy the CD, open it and read the EULA (if it even says anything about installing a root kit)

http://blogs.washingtonpost.com/secu...aids_hack.html

Hypponen said the only way to uninstall the program in the conventional sense (without running the risk of hosing your system or CD-ROM drive) is to contact Sony BMG directly via a Web form and request removal.

At that point, a real, live person will call you back and ask for all kinds of information about your system, and your reason for wanting to remove the software. You're then directed to a Web page that downloads an ActiveX program (yes, you must be using Microsoft's Internet Explorer to do this), which determines what version is installed and reports that back to First4Internet. Then you get an e-mail containing a link to another site that downloads something that finally uninstalls the Sony program.

This type of method seems dangerous to me. Expecially if a virus uses something this method. If Sony is doing this, I wonder what other companies are doing the same thing.

It also seems that this root kit, uses your CPU process time even if you don't have a CD in your CD ROM.

Re: uninstallable software from sony cds
Grumble Grumble Grumble

Well... This is what Computer Security people were afraid of... People are already starting to 'adopt' the Sony root kit to other 'purposes'...

World of Warcraft hackers using Sony BMG rootkit
http://www.securityfocus.com/brief/34

It now looks like Microsoft doesn't like the competition to it's WMA Digitial Rights Management technology. The next release of the Anti-Spyware Beta, and the Malicious Software Removal tool are going to deal with the Sony RootKit install...

Related CNET Article... Microsoft will wipe Sony's 'rootkit'
http://news.com.com/Microsoft+will+w...l?tag=nefd.top

According to today's article on the subject, SONY has agreed to a CD recall. So, I guess your not completly out of luck if you can't play your disk anymore.

Grumble Grumble Grumble

Also, according to the news reports out this week, the fix that removes the root kit is worse then the root kit. Part of the procedure is the installation of a open back door into your system, which is used to remove the root kit, but the back door is never removed, and there is already malicious websites up looking for this backdoor to take over your computer... Now because of some Manager's ethically challenged decision making process, Sony is now liable for millions of dollars lawsuit damages...

Related CNET articles...
Sony's CD scheme backfires
http://news.com.com/Sonys+CD+scheme+...tml?tag=cd.hed

Attack targets Sony 'rootkit' fix
http://news.com.com/Attack+targets+S...tml?tag=cd.top

This is clearly a problem with project management. Someone should have had the courage to stand up and say, 'Not only what were doing is WRONG, we can get into a HUGE LIABILITY PROBLEM IF WE DO THIS!!!'

There are instructions in Czech how to remove this, but the key part is to disable loading any drivers in a directory beginning with $sys$, which is the obfuscatory prefix that is used to hide the malware. You can for example run REGEDIT and delete the keys containing $sys$ or take the disk to another computer and delete the folder beginning with that manually.

Thank god Sony can't pull that crap here in Canada, concidering its a violation of our constitution, which states that we have the RIGHT to make a back-up of any Media that we legally purchase (CDs, games, dvds, software ect.)

Not that it matters to me much, the majority of the bands I listen to are under the Time Warner label, and I tend to stay away from Sony products, except their headphones, they make damn good ones.

Also, Zdenek, your sig's animation is out of wack...