Is this a concern or not

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
Windows XP. NAV resource protector says $sys$drmserver.exe keeps trying
to access symantec Shared/Nmain.exe and keeps getting stopped
Google seems to indicate that this either part of Sony's licensing or
The End Of The World As We Know It.  The Google stuff for svchost runs
about the same. Norton and AVG and AdAware and Spybot S&D don't seem
terribly concerned about either one. Should I be or not?

Re: Is this a concern or not


| Windows XP. NAV resource protector says $sys$drmserver.exe keeps trying
| to access symantec Shared/Nmain.exe and keeps getting stopped
| Google seems to indicate that this either part of Sony's licensing or
| The End Of The World As We Know It.  The Google stuff for svchost runs
| about the same. Norton and AVG and AdAware and Spybot S&D don't seem
| terribly concerned about either one. Should I be or not?

I don't understand what you mean by;   $sys$drmserver.exe
Is that supo\psed to be something like;
c:\windows\drmserver.exe
  or
c:\windows\system32\drmserver.exe

In any case...

Please submit a sample of  "drmserver.exe"  to Virus Total --
http://www.virustotal.com/flash/index_en.html
The submission will then be tested against many different AV vendor's scanners.
That will give you an idea what it is and who recognizes it.  In addition,
unless told
otherwise, Virus Total will provide the sample to all participating vendors.

You can also submit a suspect, one at a time, via the following email URL...
mailto:scan@virustotal.com?subject=SCAN

When you get the report, please post back the exact results.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Re: Is this a concern or not


Quoted text here. Click to load it

    The latter with $sys$drmserver.exe.
Quoted text here. Click to load it

   I'll do that, thanks.

Re: Is this a concern or not

Kurt Ullman wrote:
Quoted text here. Click to load it

Ignore Lipshit, you have installed the Sony Rootkit. Google for removal
instructions.



Re: Is this a concern or not

Quoted text here. Click to load it

This is a certain way of naming files, used by XCP, a copy protection
rootkit made by Sony, that will make everything "invisible" (even with
Windows Explorer set to "show all files"), especially its own services
that makes sure that $specificgame will only run from then original
CDrom.

http://blogs.technet.com/markrussinovich/archive/2005/10.aspx

It is really a hideous story. And remains of that stuff may well be
lying on the original poster's hard disk.


Gabriele Neukam

Gabriele.Spamfighter.Neukam@t-online.de

--
Often those who most loudly proclaim their freedom to choose in some
fields are the most retentive about 'correcting' others' choices in
other fields.
(Brian Brunner in alt.games.diablo2)



Site Timeline