James Delahunty
15 Nov 2005 5:28
Microsoft has deemed the XCP copy protection used by Sony BMG on some of its recently released CDs, a security risk and said it will work to help Windows OS users find and remove it. "We have analyzed this software and have determined that in order to help protect our customers, we will add a detection and removal signature for the rootkit component of the XCP software to the Windows AntiSpyware beta, which is currently used by millions of users," Jason Garms, group program manager of the Anti-Malware Technology Team said.
XCP, developed by UK-based First4Internet, has attracted a storm of criticism due to its rootkit-like installation. It's file hiding techniques have been utilized by virus writers already to hide one discovered trojan (and at least one variant) in the Windows Operating System to avoid detection. Since its discovery by Mark Russinovich, Sony BMG has also been hit by lawsuits.
Microsoft will also fight XCP using its upcoming anti-virus software. "Detection and removal of this rootkit component will also appear in Windows Defender when its first public beta is available. We also plan to include this signature in the December monthly update to the Malicious Software Removal Tool," Garms said.
Sony BMG also announced that it will halt production of copy protected CDs that use XCP and that titles currently released with the copy protection would be removed from shelves. The label will also offer a swap to unhappy customers but details about the swap have not yet been given.
Source:
MSNBC