SONY/BMG Music CD's May Install Dangerous "Root Kit"  
     
  News from PC Magazine's SECURITY WATCH today reveals that some SONY BMG Entertainment music CD's require the download and installation of a proprietary player which installs a rootkit on your PC to control digital rights on the music content.  DRM (Digital Rights Management) is supposed to ensure that copyrighted music is not stolen or traded on the Internet, but Sony's heavy-handed protection scheme could expose your PC to serious compromise.   
  A rootkit is a malicious program that hides itself by modifying operating system functions in order to intercept any attempt to find it. Functions for listing files, for enumerating running processes and memory management may be tampered with in order to hide the rootkit. Once hidden, the rootkit may perform malicious functions with less chance of being detected. Tools for detecting rootkits though indirect means are available from F-Secure and Sysinternals.  
  Sony's rootkit installs itself in the CD driver stack, a group of files which govern how your CD player interacts with your computer, and becomes extremely difficult to remove.  Even rebooting the PC in "Safe Mode" does not remove elements of the rootkit, thereby making a problem with your CD drivers extremely difficult to correct.  
  The only suggestion to avoid the problem is not to play Sony BMG CD's in a Windows computer.  
  To read the full article at PCMAG.com, click here.