Slashdot Mirror

← Back to Stories (view on slashdot.org)

Another Sony Rootkit?

Posted by ScuttleMonkey on from the slow-learners dept.

An anonymous reader writes to tell us F-Secure is reporting that the drivers for Sony Microvault USB sticks uses rootkit techniques to hide a directory from the Windows API. "This USB stick with rootkit-like behavior is closely related to the Sony BMG case. First of all, it is another case where rootkit-like cloaking is ill advisedly used in commercial software. Also, the USB sticks we ordered are products of the same company — Sony Corporation. The Sony MicroVault USM-F fingerprint reader software that comes with the USB stick installs a driver that is hiding a directory under "c:\windows\". So, when enumerating files and subdirectories in the Windows directory, the directory and files inside it are not visible through Windows API. If you know the name of the directory, it is e.g. possible to enter the hidden directory using Command Prompt and it is possible to create new hidden files. There are also ways to run files from this directory. Files in this directory are also hidden from some antivirus scanners (as with the Sony BMG DRM case) — depending on the techniques employed by the antivirus software. It is therefore technically possible for malware to use the hidden directory as a hiding place."

5 of 317 comments (clear)

  1. This article is retarded by DogDude · · Score: -1, Offtopic

    First, the article has so many grammatical errors, that it's laughable.

    Secondly, all it's talking about is a hidden directory. That's a pretty pathetic attempt at "hiding" the software, and I can't imagine any functioning rootkit would rely on something this simple (and easily bypass-able). My "Windows API" as this article calls Explorer, is already set to view hidden folders. Not a big deal. Just another checkbox.

    This article is retarded (in the way a 12 year old would use the word "retarded"), and Slashdot is retarded for posting it.

    --
    I don't respond to AC's.
  2. Yuo Failf It by Anonymous Coward · · Score: -1, Offtopic

    Plainly states that the project faces, goals I personaaly laaged behind,

  3. Re:About Sony and rootkits by pandrijeczko · · Score: 0, Offtopic

    And Sony gave Michael Jackson a recording contract - that's another reason to hate Sony.

    --
    Gentoo Linux - another day, another USE flag.
  4. Kind of like when WWF.. by Anonymous Coward · · Score: -1, Offtopic

    turned from a wrestling company to an entertainment company..

  5. So, my affections I show the world by axlr8or · · Score: -1, Offtopic

    Root kits. hahaha. I'm taking my gNewsense Distro out on a date tonight to let her know just how very much I love her. Why, I think I'll even buy her an engagement wNIC