The Sony Rootkit (below) has happily made it into Symantec’s database of security risks, though regrettably not the antivirus signatures.
This is a good reason to disable the annoying autorun function in XP:
System Key: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CDRom]
Value Name: Autorun
Data Type: REG_DWORD (DWORD Value)
Value Data: (0=disable, 1=enable)
ZDNet have wrote up this artilcle http://insight.zdnet.co.uk/internet/security/0,39020457,39237277,00.htm about this so obviously a lot of people are annoyed.
Sony have now withdrawn the CDs from sale. I beleive there’s legal action in the us too- and it’s what they deserve for being so irresponsible.