Thursday, November 10, 2005

First Trojan using Sony DRM spotted | The Register

No Sony CD's for me.

First Trojan using Sony DRM spotted | The Register: "By John Leyden
Published Thursday 10th November 2005 13:25 GMT
Get breaking Security news straight to your desktop - click here to find out how

Virus writers have begun taking advantage of Sony-BMG's use of rootkit technology in DRM software bundled with its music CDs.

Sony-BMG's rootkit DRM technology masks files whose filenames start with '$sys$'. A newly-discovered variant of of the Breplibot Trojan takes advantage of this to drop the file '$sys$drv.exe' in the Windows system directory.

'This means, that for systems infected by the Sony DRM rootkit technology, the dropped file is entirely invisible to the user. It will not be found in any process and file listing. Only rootkit scanners, such as the free utility RootkitRevealer, can unmask the culprit,' warns Ivan Macalintal, a senior threat analyst at security firm Trend Micro"

No comments:

Edward A. Villarreal. Powered by Blogger.

Labels

Total Pageviews