ARIES Rootkit Remover - Lavasoft
What does this program do?
The ARIES Rootkit Remover v1.0 is designed to locate and permanently remove the rootkit that was developed by First4Internet and used by Sony BMG to hide their digital rights management (DRM) software. Unlike Sony's own rootkit remover that has been known to cause blue screens, Lavasoft's ARIES Rootkit Remover is a reliable, stand-alone tool.
In fall of 2005, Sony included rootkit-style content protection software on around 4.7 million CDs from over 50 artists worldwide, exposing consumer's computers to security holes. The rootkit, developed by First4Internet, was placed on unsuspecting systems and networks to hide Sony BMG's DRM protection software. According to Sony, about 6 million distributed CDs are currently imbedded with this software.
Who should use this program?
Anyone who has purchased Sony BMG CDs in 2005 and 2006 should use this program.
How does it work?
- Download the ARIES Rootkit Remover.
- Back up all critical data files and close any open applications.
- Select "AriesRemover.exe" to activate the tool.
- Select "Perform Scan".
- In the confirmation window, select the option to confirm your approval, and then select "Proceed". The tool will begin to search for certain indicators that reveal the presence of the rootkit on your system.
- If the tool does not detect the rootkit, a green checkmark will appear beside the rootkit indicators on the application screen. If the rootkit is detected, a red cross will appear by the rootkit indicators.
- If the remover tool detects the rootkit, select the "Clean" button.
- When the cleaning is complete, select "Reboot" to restart your computer.
Note: The Lavasoft ARIES Rootkit Remover only removes the ARIES rootkit; it does not affect the DRM software from Sony. Once the ARIES rootkit is removed, you can listen to the CD on your computer without the ARIES rootkit reinstalling. The remover tool will neutralize the ARIES rootkit, but in some cases the tool may report that traces of the rootkit were found the next time you start your computer. This is a result of the Sony DRM functions and does not indicate additional risk, unless the tool reports "ARIES rootkit module detected" again. In this event, please contact our Lavasoft Security Analysts for assistance.
