Sony continues supplying rootkit-like software

It looks like they haven't learnt their lesson:

Sony blasted for helping hide malware on users' PCs - ZDNet Australia

Quote:

Security specialists are warning that Sony's MicroVault USB, which is a biometric USB storage device, cloaks driver software in a Windows directory that could be used by malware to avoid detection from security applications. The manner of installing and hiding software on users' PCs is reminiscent of Sony BMG's attempt two years ago to protect music copyright by installing rootkit software. The fingerprint recognition software packaged with Sony's Microvault USB installs itself as hidden files on the users system under the "c:\windows\" directory. F-Secure security expert, Mika Tolvanen, reported that it is possible to enter the hidden directory using a Command Prompt and from there create and run new hidden files. "Files in this directory are also hidden from some antivirus scanners -- as with the Sony BMG DRM case -- depending on the techniques employed by the antivirus software. It is therefore technically possible for malware to use the directory as a hiding place," said Tolvanen on the F-Secure blog. (continues)

Sony continues supplying rootkit-like software - ZDNet Australia

Quote:

Sony continues to distribute software containing a rootkit-like cloaking technology, which security firms say could be used by criminals to hide malware, from its Web site. Sony has once again come under fire for using cloaking technology on user PCs. A Sony spokesperson yesterday claimed that users of its biometric MicroVault USB device are not at risk because the product has been discontinued. However ZDNet Australia discovered the products were being sold at a Sydney-based Sony Central retail outlet today for AU$35. Staff at the store had not received any information from Sony about potential security issues associated with the product. In addition, the offending software is still available on Sony’s Web site and according to F-Secure tests, still cloaks itself in the Windows directory. (continues)