Date: November 30, 2005
Subject: Spyware, Rootkits and Computer Security

In light of the recent news items relating to Sony's use of Digital Rights Management software to prevent unauthorized duplication of music CDs it seems a good time to discuss again the ways in which you can maintain the security of your computer system(s).

Sony's use of a rootkit to hide its Digital Rights Management software from the users of computers upon which Sony music CDs are played places these computers at risk of infection by malicious software.  Since rootkits are installed at a very low level in a computer they can successfully hide themselves from almost all current detection schemes. Virus and spyware writers take advantage of this by hiding themselves under the rootkit so that their software can also avoid detection.

At the current state of the technology there is little that can be done to protect a computer from infection by a rootkit, particularly if the rootkit is delivered by a source believed to be trustworthy, such as a major CD or software distributor. This is changing and many security software suppliers have stated that they will offer protection from rootkits in the future and, more immediately, have committed to removing the Sony rootkit from infected systems. (The Sony rootkit is estimated to have infected 500,000 computers worldwide. Sony's own removal tools have fallen far short of the task and in many cases have caused further problems. Incidentally, the Sony rootkit was included on 52 recently distributed music CDs with combined sales of at least 2,000,000 copies worldwide.)

Here are some precautions that you can take to minimize the risk from rootkits and other malicious software.

A/ Turn Off The Inbox Preview Pane - Many viruses and spyware programs are distributed via email and are activated when the message is viewed. Most email programs automatically preview incoming messages, allowing any malicious software to be installed without your knowledge. To prevent this you should turn off the preview pane for your inbox so that you can determine whether or not to keep a message without its being automatically opened.

E/ Install Security Software And Use It - Many excellent programs exist that protect your system from malicious software. Regardless of how good these packages are they will only protect you if they are installed and kept up-to-date.

As always, please contact me if you have any questions about this or any other computer issue.

Previous issues of the ELM Bulletin are available from our website.

Please feel free to forward these bulletins to anyone you wish. If you no longer wish to receive these bulletins, or if you received this bulletin by mistake please send me an email with "Please remove me" in the subject line and I will take your name off of the bulletin mailing list.