Rootkit for DVD is here READ THIS!!!

[docrhody]

See http://uninstall.settec.com/eng/ and http://securityresponse.symantec.com/avcenter/reference/stories.from.the.drm.world.pdf

This can install even if autorun is off and it turns off anyDVD and other programs that prevent it from working. The remaoval tool didn't work for me, trying other non-specific tools. BTW I never agreed to the EULA (and never saw it).

[Dv8ted2]

This can install even if autorun is off.

You misunderstood.

In the pdf, it states that autorun is enabled.

It cannot install unless something triggers it, in this case, autorun is enabled.

[Noahtuck]

Not to mention this "Mr. & Mrs. SMith" from over there & this "rootkit" is kind of old new's.....

[docrhody]

I had this virus (dll file), apparently it was exploited by a Trojan I picked up. I had to use ewido to clean it (it reinstalled for about a week-then was no longer detected), then the problem was solved when I updated anyDVD. Now I can play DVDs fine.

The "virus" dumps the dll file to a temp directory even if autorun is off. It stays there even if the eula is refused, the trojan that activated it was from an internet file I tried to install called zipcodec.

[Dv8ted2]

I had this virus (dll file), apparently it was exploited by a Trojan I picked up. I had to use ewido to clean it (it reinstalled for about a week-then was no longer detected), then the problem was solved when I updated anyDVD. Now I can play DVDs fine.

The "virus" dumps the dll file to a temp directory even if autorun is off. It stays there even if the eula is refused, the trojan that activated it was from an internet file I tried to install called zipcodec.

If autorun is disabled, you do not see a eula.

[ROF]

How does something install itself if auto run is disabled?

[Dv8ted2]

How does something install itself if auto run is disabled?

That is my question as well.

[jtoolman2000]

Apparently, from what I read, it copies itself to a temp folder regardless of whether you agree or not to the initital pop up window that opens upon insertion of the DVD. If you say yes, it installs it. If you say no, it still stays in the temp folders and then from there, some maliciousl software ( virus / trojan ) will use it in some form.

[Dv8ted2]

Apparently, from what I read, it copies itself to a temp folder regardless of whether you agree or not to the initital pop up window that opens upon insertion of the DVD. If you say yes, it installs it. If you say no, it still stays in the temp folders and then from there, some maliciousl software ( virus / trojan ) will use it in some form.

If autorun is disabled, nothing runs. Nothing installs. Nothing happens. No popup screen-

[ROF]

From what I read, and have now confirmed, my anti-virus provider (McAfee) protects me from the .dll file. Of course, as it states in the article, if you have auto-run turned off, this will not install in the first place.