This is a fascinating finding by Mark Russinovich. His painstaking investigation reveals that a Sony Audio CD install some malware on his PC. It’s a really interesting read. He details the whole process step-by-step. Check it out as Mark’s investigative techniques are very impressive.

The anti-copy protection software is based on Rootkit which is used by hackers of viruses. It goes deep into the operating system and make itself “invisible.” It basically prevents uninstallation or deletion of itself and is therefore extraordinarily difficult to uninstall. In this particular case, removing it manually could shut off access to the computer’s CD player itself. It installed without the user permission nor notice. So it’s basically a virus, it is an intrusive compromise and it is nasty!

The length the record company goes through really infuriates me. While they have the right to protect their content, I have a problem when their tactic crosses the line of fairplay and infringe on consumers’ rights.

UPDATE #1 (11/2/05):
Looks like Sony is bowing to consumer pressure and will be working with anti-virus software makers to provide a patch to remove the software.

UPDATE #2 (11/11/05):
The first malicious trojan horses that piggy-backed on Sony CD walware were spotted yesterday. They enable the attacker to have complete control over the infected host. So the reality is the software from Sony CDs isn’t just about content protection anymore, it’s also enable PCs to be taken over by hackers!

California has already filed a class action lawsuit.