9 replies to this topic

[acooldozen]

Sony Rootkit.....tip of the day!

http://www.dozleng.c...wtopic=7048&hl=

[acooldozen]

Using SpywareBlaster to protect against Sony's rootkit

How to use SpywareBlaster Tools Custom Blocking button to install protection against Sony's rootkit:

Launch SpywareBlaster v 3.4 (install new release if necessary from:
http://www.javacools...reblaster.html)

Click on Tools in left-hand panel
Click on Custom Blocking button
Click on Add item
Name the new item: SONY
Click Ok
Use copy/paste to Insert CLSID: {4EA7C4C5-C5C0-4F5C-A008-8293505F71CC}
Check the SONY Item box
Click Protect Against Checked Items button
Exit SpywareBlaster (its protection is passive)

Reference: StevieO post #4 in Thread Re: Sony Rootkit and blocking F-4I's ActiveX control CodeSupport CLSID at: http://www.wilderssecurity.com/showpost.ph...591&postcount=4

[Andavari]

Cool!

[Vanguard382]

Your right, this is the tip of the day.
Thanks

[jake]

Does this only install when you're running a sony CD?...or can it happen on a site online?
thanks for da'tip homey

[acooldozen]

Sony Rootkit tip of the day!

http://www.dozleng.c...wtopic=7048&hl=

[Mike Rochip]

jake, on Nov 20 2005, 07:30 AM, said:

Does this only install when you're running a sony CD?...or can it happen on a site online?
thanks for da'tip homey 

I'm not sure if this a definitive answer but I've been reading a lot about thie rootkit and no one has ever said it can come from anywhere but the CDs. Apparently it is installed when Sony make you download their (pirated) media player to be able to play the CD.

Quite a few people have commented on how stupid Sony is being because your computer becomes indected if you BUY the CD but not if you download the songs for FREE via filesharing networks.

[acooldozen]

List of CD's that install Rootkits..........lots of info here!

http://www.dozleng.c...owtopic=7079

[jake]

hmmm this is interesting
http://insight.zdnet...237277-4,00.htm
apparently you should have to rebuild/build a new pc, reinstalling the OS WON'T even help get rid of it.
what about a clean full format, then a reinstall?

[Andavari]

jake, on Dec 8 2005, 10:24 AM, said:

what about a clean full format, then a reinstall?

A quick or full format then reinstall would get rid of it, and of course everything else as well.