Forum Home
Press F1
 
Thread ID: 63617 2005-11-16 21:43:00 How would you know if you had a root kit on your computer? stu161204 (123) Press F1
Post ID Timestamp Content User
405000 2005-11-16 21:43:00 With the Sony copy-protection scheme & How thing have turned bad from them I would guess a lot of users might be asking "How would you know if you had a root kit on your computer?" from playing one of Sony copy-protection CD’s?

I thought we could use this thread & everyone gives some tips on how to find & remove root kits from there computer & possible we could turn this in to a FAQ??
stu161204 (123)
405001 2005-11-16 21:49:00 The sony rootkit makes any file starting with $sys$ invisible. So create a text file on your desktop and rename it something like $sys$test.txt if the file disappears you have the rootkit on your comp. joshjnz (7844)
405002 2005-11-16 21:59:00 Mark Russinovich, who discovered the rootkit has a rootkit finder program on his site.

www.sysinternals.com
bob_doe_nz (92)
405003 2005-11-16 23:12:00 Also have a look at these.

Rootkit: www.worldstart.com
Sony's FAQs: cp.sonybmg.com
Sony's uninstall request:
cp.sonybmg.com
Cdex: www.worldstart.com
Sophos Removal Program Resolve:
www.sophos.com
hth
johnboy (217)
405004 2005-11-17 01:13:00 Sony's uninstall request:
I'm not sure about using Sony's removal request, they dont tell you what its going to do exactly and apparently they do not remove every last scrap of that horrible rootkit. And why cant they just give us a proper uninstall utility? :mad:
bob_doe_nz (92)
405005 2005-11-17 03:05:00 How would you know if you had a root kit on your computer?That question could be sooooo misinterpreted! :lol: Greg (193)
405006 2005-11-17 03:59:00 Do not use the sony rootkit removal tool plod (107)
405007 2005-11-17 04:14:00 This is the first time I have even heard of a "root kit". But I would guess if it is installed (by Sony?) to protect their property rights I would doubt very much an uninstaller by the same company would be designed to allow a "get around". :2cents: mark c (247)
405008 2005-11-17 06:15:00 OK I see it in this thread (pressf1.pcworld.co.nz). mark c (247)
405009 2005-11-17 07:00:00 www.grc.com

Steve Gibson & Leo Laporte talk about root kits.

media.grc.com (audio version 16MB)
robsonde (120)
1 2