RootKit

[luluhifi]

Hello everyone in the Pit I would like to know the best way to clean out this Rootkit >>XP :crash: Edited December 13, 2005 by luluhifi

[faith_michele]

The best way to make sure it is gone is to reformat.

 

If it is the Sony DRM Rootkit, there are various tools out there.

[luluhifi]

The best way to make sure it is gone is to reformat.

 

If it is the Sony DRM Rootkit, there are various tools out there.

 

It was the XCP. Sony. RootKit.>>>>CDProxyServ.exe

 

I run the Pit scan and it lead me to a tool to uninstall the XCP>>>I Disable System and run the Tool>>did another Pit scan and it didnt show so I guest it must be gone

[faith_michele]

That is good because the removal tools first published, did not work.

 

I think they have fine tuned it by now.

 

[luluhifi]

That is good because the removal tools first published, did not work.

 

I think they have fine tuned it by now.

 

 

LoL By me reading about it I didnt have anything to lose so I just gave it a shot and things seem to be fine sofar. So glad it is not the system Iam using now it is my sister's Laptop.

[TheJoost]

Since this seems to be an increasing problem from jerks with nothing better to do, anyone concerned about being "rooted" should grab a copy of 'RootkitRevealer' from Sysinternals. It's free.

 

 

 

 

Ciao,

Joost

 

Let's not be playing games with the word filter--IG

 

 

1)... and do not attempt to bypass the word filter. It is there for a reason.

 

Edited December 13, 2005 by IntelGuy

[Juliet]

LoL By me reading about it I didnt have anything to lose so I just gave it a shot and things seem to be fine sofar. So glad it is not the system Iam using now it is my sister's Laptop.

 

lulu.....keep us posted

[stormy13]

Which "remover" did you use? reason for asking is that unless things have changed recently, all any of the removers (including Sony's own) did was to remove the cloaking part, but left the DRM software behind.

[luluhifi]

Which "remover" did you use? reason for asking is that unless things have changed recently, all any of the removers (including Sony's own) did was to remove the cloaking part, but left the DRM software behind.

 

When I run the PitStop Scan and it show I posted and I click on it which was in Yellow and down the line it lead me to this tool call XCP2_Uninstaller>>I use it and run the Pit scan again and it was gone.

 

ok I found IT AND THIS IS WHAT i USE>>http://cp.sonybmg.com/xcp/english/updates.html

Edited December 13, 2005 by luluhifi

[stormy13]

This from the Sony link,

 

Note, this uninstaller will not remove the detection tool itself. The detection tool can be deleted manually in the normal manner.

I assume by "deleted in the normal manner" means that it should show up in Add/Remove Programs (somehow doubt it). Somehow with the way that Sony handled this whole fiasco, I'm not sure that I would trust their uninstaller yet, especially with the first bit in that quote above. From what I can see, all it does is remove the cloak (and possibly patch the hole that was in the rootkit from the beginning. I would have a look at the first screen shot here,

 

http://www.sysinternals.com/blog/2005/10/s...tal-rights.html

 

and see if any of the files that are shown there are still on the computer (minus the $sys$ bit).

[luluhifi]

This from the Sony link,

I assume by "deleted in the normal manner" means that it should show up in Add/Remove Programs (somehow doubt it). Somehow with the way that Sony handled this whole fiasco, I'm not sure that I would trust their uninstaller yet, especially with the first bit in that quote above. From what I can see, all it does is remove the cloak (and possibly patch the hole that was in the rootkit from the beginning. I would have a look at the first screen shot here,

 

http://www.sysinternals.com/blog/2005/10/s...tal-rights.html

 

and see if any of the files that are shown there are still on the computer (minus the $sys$ bit).

 

 

oK GO ahead and keep us posted please>>I also need to do that myself and take alook also.