Some weeks ago Sony made the attempt to protect the music from some of the cd´s they distribute by adding a rootkit software which would be installed if the user wanted to play the cd on his personal computer. The technique had its flaws and was only working on windows but it still ment that a rootkit was installed on the pc and other scripts could use this rootkit for malicious purposes. After a large outcry from the web community Sony decided to pull the cd´s from the shelves and offer a tool to uninstall the rootkit. (which you would only get through a long process)
Sony, the rootkit and the internet community
No matter which internet page you open this days you are guaranteed to find at least one article mentioning the Sony rootkit affair. Instead of providing you with the latest news on the case customer vs. Sony BMG I´d like to analyse an interesting aspect of it.
In the beginning, there was one guy, who found out about the rootkit software, analysed it in depth and wrote an entry in his blog named Mark’s Sysinternals Blog on a well frequented site. Then the ball got rolling, the news was copied and commented on other sites, big portals like slashdot.org and digg.com had articles that soon became the most popular ones for the day.
How to remove the Sony – XCP DRM Rootkit
This article explains it all. It provides links to consumer made cd listings that contain the rootkit software, shows how cds with the rootkit software look like, explains how one can check his personal computer for the rootkit and finally gives a detailed walkthrough on how to remove the rootkit software manually from your computer.
Sony halts production of ‘rootkit’ CDs
After lots of controversy about their rootkit music cds Sony announced today that it will halt the production of rootkit music cds. It seems that consumer and media backlash finally paid off.
Sony and the rootkit, the story continues
The news spread like fire last week: Sony has a installer on some of their music cd´s that might install a rootkit on customers pc´s if they put them into their personal computer. The rootkit software could not be uninstalled by normal means and has already been used by hackers to hide World of Warcraft cheat scripts from being detected by Blizzards Warden client.
World of Warcraft hackers using Sony BMG rootkit
It has come to our attention that World of Warcraft Hackers already are using Sonys Rootkit Software to hide their hacking from Blizzards Warden Client.
We reported earlier this week that some Music Cds by Sony labeled “Content enhanced & protected” would bring up an installation program when the music cd was put into a personal computer.
Universal Music Group Music Cds might also install rootkit
And another player joins the rangs of the companies that might install spyware with their Music Cds when you put them into your pc drives. “Fontana Distribution, part of Universal Music Group and distributors for Upstairs Records Inc., are encouraging the independent records labels they distribute to use content protection on their CDs. “Twelve Eighteen”, featuring the hit song “Summer Nights”, carries the same content protection currently being used by Sony BMG.
John Lopez of Upstairs Records commented: “we are very pleased with the seamless production of the album. The media player on the CD has a good user experience and we intend using the technology on more new releases.”

