# Sony DRM malware **URL:** \ **Category:** The BBQ Pit\ **Created:** [November 2, 2005, 8:45pm UTC](https://boards.straightdope.com/t/sony-drm-malware/329162 "2005-11-02T20:45:05Z")\ **Posts on this page:** 9\ **Page:** 12
**Author:** ![Tuckerfan](https://avatars.discourse-cdn.com/v4/letter/t/eada6e/32.png) [@Tuckerfan](https://boards.straightdope.com/u/Tuckerfan)\ **Post date:** [December 10, 2005, 10:53pm UTC](https://boards.straightdope.com/t/sony-drm-malware/329162/221 "2005-12-10T22:53:52Z")
> [@Revtim](#): > > Sure, if you manually run something from the disk, that’s as bad as having autorun turned on. > > I’ve never heard of viruses in image files or codecs, but one way a video file can get you malware is via the mechanism to check digitial rights. Basically it hits a URL to get the rights, but it could just as easily go to the URL of an executable somewhere. [JPG virus.](http://www.sophos.com/pressoffice/news/articles/2002/06/va_perrun.html) > [@](#): > > Sophos, a world leader in corporate anti-virus protection, today called for the anti-virus industry to act responsibly in light of the discovery of the first virus capable of infecting JPEG graphic files. > > The virus, known as W32/Perrun-A, was sent directly to the anti-virus community by its author and is considered to be a “proof of concept”. It spreads in the form of a traditional Win32 executable virus (usually called proof.exe), making changes to the Registry to mean that JPEG (.JPG) graphic files are examined by an extractor (called EXTRK.EXE) before they can be viewed. If the extractor finds viral code inside the graphic file it is executed. ---
**Author:** ![Revtim](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/revtim/32/1042_2.png) [@Revtim](https://boards.straightdope.com/u/Revtim)\ **Post date:** [December 10, 2005, 11:41pm UTC](https://boards.straightdope.com/t/sony-drm-malware/329162/222 "2005-12-10T23:41:47Z")
Interesting, but I’m not too worried about a virus that requires both a standard executable in additional to another file. I can see no advantage to this approach over simply making the full virus in the executable which is required anyway. Whatever increased stealthiness is gained is lost over requiring the host to have both pieces to be actively infected. I suppose it’s an interesting proof of concept, and shows that any file type can carry a viral payload if the virus writer does enough work, but I don’t see it being a real problem in the real world. Any infection with this thing would likely be much more effective if redesigned as a single executable instead of something requiring multiple pieces to come together. ---
**Author:** ![Revtim](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/revtim/32/1042_2.png) [@Revtim](https://boards.straightdope.com/u/Revtim)\ **Post date:** [December 17, 2005, 1:11pm UTC](https://boards.straightdope.com/t/sony-drm-malware/329162/223 "2005-12-17T13:11:24Z")
Lavasoft (makers of Ad-Aware spyware/adware remover) have made a beta rootkit remover. [http://www.lavasoftresearch.com/betaprogram/rootkit.php](http://www.lavasoftresearch.com/betaprogram/rootkit.php) Since it’s a beta and does such low-level stuff, and I’m pretty sure I don’t have the rootkit, I’m not going to risk running it yet. Once it’s out of beta, I’ll run it to make sure I didn’t somehow get rootkit. If you think you have the rootkit, it might be worth taking a risk on this beta. ---
**Author:** ![Diogenes\_the\_Cynic](https://avatars.discourse-cdn.com/v4/letter/d/e99b99/32.png) [@Diogenes\_the\_Cynic](https://boards.straightdope.com/u/Diogenes_the_Cynic)\ **Post date:** [December 28, 2005, 4:37am UTC](https://boards.straightdope.com/t/sony-drm-malware/329162/224 "2005-12-28T04:37:16Z")
Apologies for the bump but I didn’t see this in the thread and I think it should be pointed out. [Sony DRM Installed Even When EULA Declined](http://yro.slashdot.org/article.pl?sid=05/12/22/160206&from=rss) This really pisses me off. ---
**Author:** ![fortytwo](https://avatars.discourse-cdn.com/v4/letter/f/f9ae1b/32.png) [@fortytwo](https://boards.straightdope.com/u/fortytwo)\ **Post date:** [December 30, 2005, 6:04pm UTC](https://boards.straightdope.com/t/sony-drm-malware/329162/225 "2005-12-30T18:04:34Z")
Another bump because Sony looks to have come to a partial agreement on compensation for their naughty copy protection. [Compensation deal](http://newsvote.bbc.co.uk/1/hi/technology/4568670.stm) > [@](#): > > Free music downloads and cash refunds could soon be offered to owners of Sony BMG CDs loaded with controversial anti-piracy software. > > The offers are part of a proposed settlement of lawsuits against Sony BMG over the use of software aimed at thwarting illegal copying of CDs. Some outstanding lawsuits will still be pursued however. Although Sony have promised not to use this copy protection again I’m sure there will be other perhaps more sneaky attempts in the future. ---
**Author:** ![Diogenes\_the\_Cynic](https://avatars.discourse-cdn.com/v4/letter/d/e99b99/32.png) [@Diogenes\_the\_Cynic](https://boards.straightdope.com/u/Diogenes_the_Cynic)\ **Post date:** [December 30, 2005, 6:18pm UTC](https://boards.straightdope.com/t/sony-drm-malware/329162/226 "2005-12-30T18:18:18Z")
I wouldn’t touch their free downloads with a ten foot pole. ---
**Author:** ![Musicat](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/musicat/32/20189_2.png) [@Musicat](https://boards.straightdope.com/u/Musicat)\ **Post date:** [December 30, 2005, 6:41pm UTC](https://boards.straightdope.com/t/sony-drm-malware/329162/227 "2005-12-30T18:41:27Z")
> [@Diogenes the Cynic](#): > > I wouldn’t touch their free downloads with a ten foot pole. Perhaps you could find an eleven-foot pole on ebay. ---
**Author:** ![Tuckerfan](https://avatars.discourse-cdn.com/v4/letter/t/eada6e/32.png) [@Tuckerfan](https://boards.straightdope.com/u/Tuckerfan)\ **Post date:** [December 31, 2005, 2:00am UTC](https://boards.straightdope.com/t/sony-drm-malware/329162/228 "2005-12-31T02:00:10Z")
[Album sales dropped 7% in the US.](http://news.bbc.co.uk/2/hi/entertainment/4566186.stm) Download sales are up, however. I think that this cock up Sony’s had is only going to increase that. ---
**Author:** ![Steve\_MB](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/steve_mb/32/5339_2.png) [@Steve\_MB](https://boards.straightdope.com/u/Steve_MB)\ **Post date:** [December 31, 2005, 8:18am UTC](https://boards.straightdope.com/t/sony-drm-malware/329162/229 "2005-12-31T08:18:11Z")
Offering free downloads in compensation for infecting people’s computers with malware is like offering a free all-you-can-eat buffet in compensation for giving people food poisoning. [Previous page](https://boards.straightdope.com/t/sony-drm-malware/329162.md?page=11)