Spotlightingnews

Microsoft Removes Sony's Rootkit

Microsoft AntiSpyware Will Remove Sony BMG’s XPC Rootkit

Microsoft announced that it will remove Sony BMG's copy-protection software which installs itself on personal computers, saying it poses a security risk to PCs running their Windows operating system.

Sony BMG's software, named XCP was developed by First4Internet in the United Kingdom and is used on music CDs to restrict the user from copying or sharing the copyrighted content.

The software has generated concerns as it does not ask or at least notify the user about installing the restrictions, but rather acts like a virus and hides itself deep into the operating system.

"We have analyzed this software and have determined that in order to help protect our customers, we will add a detection and removal signature for the rootkit component of the XCP software to the Windows AntiSpyware beta, which is currently used by millions of users," said group program manager of the Anti-Malware Technology Team, Jason Garms.

"Detection and removal of this rootkit component will also appear in Windows Defender when its first public beta is available. We also plan to include this signature in the December monthly update to the Malicious Software Removal Tool."

Recently, security advisors notified that hackers can take advantage of a weakness in XCP and install malicious software on the users' computers. Sony BMG released a patch to make the program more visible.

In response to the public's angry reaction, Sony BMG said it will temporarily cease producing music CDs protected with XCP.

Last week, an United States government representative warned publishers against using CD and DVD protection that installs itself without the users' agreement or knowledge.

"It's very important to remember that it's your intellectual property; it's not your computer. And in the pursuit of protection of intellectual property, it's important not to defeat or undermine the security measures that people need to adopt in these days," said the assistant secretary the Department of Homeland Security, Stewart Baker.