Remove The Rootkit

[bearskin]

maybe someone wants to be the first to try it:

http://www.lavasoftresearch.com/betaprogram/index.php

[Andy_veal]

"We are pleased to announce the launch of the ARIES Rootkit Remover BETA to help remove the Sony Rootkit for good! As you know, in 2005 Sony included rootkit style content protection software to approximately 4.7 million CDs of over 50 artists worldwide exposing consumer PCs to security holes. The DRM (Digital Rights Management) software called XCP, developed by First4Internet, was placed. According to Sony, about six million CDs currently have this software.

Lavasoft answers the challenge by giving you the Beta of the ARIES Rootkit Remover (Sony Rootkit). Currently a standalone tool, this application provides a reliable, trustworthy, and safe way of removing the root-kit, unlike Sony’s own root-kit remover that has been known to cause blue screens.

Key Features

Our application is a stand alone application from an independent software company. The ARIES Rootkit Remover is developed by our competent team within Lavasoft Research & Development lab to help protect consumers rid of the rootkit once and for all by removing the ability to run once more after reboot. To access the application, register first as a Beta tester at Lavasoft Beta Application Testing Registration.

Qualifications of Testers

There are no special qualifications for testers. Both users that are infected with the root-kit and uninfected testers are encouraged to test the application. However, the testers need to run 2000 through 2003 (or even Vista) and should report back their OS version upon encountering problems.

For more information, see http://www.lavasoftresearch.com/betaprogram/rootkit.php

We value your experience and feedback

If you have suggestions for additional features or changes to existing features, let us know in your reports or by contacting us directly via [email protected]. "

Quoted from LS Research email

[Pete_C]

A stable and safe removal tool was included as part of last weeks windows update in the malicious software removal tool.

http://support.microsoft.com/?kbid=890830

Scroll to the list of nasties it removes , it is the last listed.

http://www.microsoft.com/security/encyclop...NT%2fF4IRootkit

WinNT/F4IRootkit is a kernel-mode rootkit used for copy protection on certain Sony BMG audio CDs. There are several versions of this rootkit. The rootkit hides certain Windows system resources, including files, processes, and registry settings. The rootkit can be used by attackers to hide malicious content on the computer.

So what should the average computer user do? Sign up to be a beta tester or run windows update ?

I think that in this case, windows update wins the race.

[Andy_veal]

A stable and safe removal tool was included as part of last weeks windows update in the malicious software removal tool.

http://support.microsoft.com/?kbid=890830

Scroll to the list of nasties it removes , it is the last listed.

http://www.microsoft.com/security/encyclop...NT%2fF4IRootkit

WinNT/F4IRootkit is a kernel-mode rootkit used for copy protection on certain Sony BMG audio CDs. There are several versions of this rootkit. The rootkit hides certain Windows system resources, including files, processes, and registry settings. The rootkit can be used by attackers to hide malicious content on the computer.

So what should the average computer user do? Sign up to be a beta tester or run windows update ?

I think that in this case, windows update wins the race.

A great point..... the average user will indeed support Windows Updates..... or at least I will

Edited December 18, 2005 by Andy_veal