CD’s affected by the Sony-BMG spyware: 59 Comments

1. omega.org.uk wrote,

   Partial List of Rootkit-Laden CD’s

   A list of CD’s known to have the Sony Rootkit on them is available here:
   http://www.idiotabroad.com/2005/11/cds-affected-by-the-sony-bmg-spyware/trackback/
   If you have used these CD’s in your computer, then chances are you are infected, f…

   Link | November 15th, 2005 at 14:37

2. Nicht-gekauft.de wrote,

   47 CDs mit Sonys XCP Kopierschutz

   Anders als uns Sony / BMG eine Zeit lang hat glauben lassen, befindet sich der Sony-XCP-Rootkit-Virus-Spyware-Mist mittlerweile schon auf 47 Alben. 3 Millionen Exemplare
   sollen bereits verkauft sein. Wenn die Angaben stimmen, steht der Verbreitungsgrad,

   Link | November 15th, 2005 at 14:46

3. Miles_2397 wrote,

   Do you think It’s possible the titles you’ve not heard about have been offered “discounts”?
   –
   Sony: Use the DRM, and we’ll make it cheaper by x% and maybe give x% more revenue?

   Struggling new artist / unknown : Sounds Fair! Where do I sign?
   –
   It’d explain why they’re keeping so quiet about what CD’s are crippled, probably trying to notify the Artists concerned and get them inbetween a rock and a hard place reagerding the contract…

   What do you think?

   Link | November 15th, 2005 at 15:23

4. Allen wrote,

   Interesting search: http://www.google.com/search?hl=en&q=site%3Aamazon.com+COPY+PROTECTED+

   Link | November 15th, 2005 at 17:34

5. bdb wrote,

   At least some of this list is incorrect. XCP (the “rootkit”) is not the only copy-protection that Sony/BMG uses; they have also used the far less-intrusive Suncomm MediaMax software for some releases. Example: “Z” by My Morning Jacket does NOT include the rootkit. This was done by BMG (RCA) without permission by the band’s label (ATO). There has been a horrible amount of misinformation regarding this, particularly from Amazon reviewers complaining about a CD they don’t own.

   Link | November 15th, 2005 at 17:45

6. The Supreme Irony of Life... wrote,

   Sony Does the Right Thing (Finally)

   In a strange turn of events. Sony admits that their DRM scheme wasn’t a good idea

   Link | November 15th, 2005 at 19:00

7. geoffrey wrote,

   I’m afraid based on the feedback I’ve received, I will have to make three retractions.

   First, as bdb points out, Z by Morning Jacket does not contain the rootkit.

   Secondly, as pointed out by Nick S, Sarah McLachan’s new album is rootkit free as well.

   Lastly, pointed out by Thomas F., the Santana album is devoid as well.

   In all cases, I classified them as containing the rootkit after viewing posts made on various forums, as well as comments made on Amazon (from supposedly actual users).

   Apologies for the errors everyone.

   Geoffrey

   Link | November 15th, 2005 at 19:08

8. zebidi wrote,

   Although the comments by Sony/bmg state the particular copy-protection was not used in UK I have sneaky feeling they may be telling a few mistruths. I purchased one of the Cds Natasha Bedingfield, Unwritten and have had all sorts of problems since playing said Cd on computer I finished up having to reformat system completely as I am no expert. I kept having BSD and having to constantly re-boot.

   I am not a criminal I just want to play the music I purchased on what ever device I want and as for the eula don’t get me going . I may have rant about that later.

   Big business only do the right thing when it hits the bottom line.

   Link | November 15th, 2005 at 19:12

9. fvl wrote,

   At least two other titles on this list are NOT protected with the XCP “rootkit” technology: David Gray and Kasabian (both are protected with Sunncomm copy protection, which has its own problems).

   We at EFF have posted a verified list of protected CDs. Please let us know if you can verify (by looking on the back of the CD package) whether these CDs are protected, and, if so, by which technology (there is a small URL printed that gives it away — here’s a spotter’s guide to help).

   Link | November 15th, 2005 at 20:10

10. geoffrey wrote,

    As I live in the UK, where Sony has not shipped rootkit CD’s, I’m not going to be able to physically verify each CD on the list. However, the EFF list from the above comment, only shows 25 total discs (rootkit plus sunncomm), whereas I’ve compiled 47.

    A great write-up on the Sunncomm DRM is available here

    Link | November 15th, 2005 at 20:43

11. geoffrey wrote,

    Thanks to Chris D. for letting me know about G3.

    I think it stands to reason considering G3 was not on EFF’s list or mine, that there are more out there that have not been identified.

    Over the next few days I’m going to do my best to re-confirm the delta between EEF’s list and mine. I would appreciate help from anyone who can give it!

    Link | November 15th, 2005 at 21:50

12. sekerob wrote,

    Now, i own none of the listed 44 or 47 as you prefer…1 in there is on my wants list. I will not buy it. The artists may sue for Sony to be living in undue impairment of earnings and a few other reasons….lets file that class action suite. All Sony/Sony subsidiaries and affiliates products on my private list are blacklisted forthwith….the shear arrogance is revolting.

    Link | November 15th, 2005 at 22:02

13. Nick s wrote,

    Zebidi: my wife’s UK copy of “Unwritten” uses Alpha Player (4.5.1.0) by Settec Inc. It does not actually seem to install anything and does not connect to the Internet; the “Connect” button is disabled. The CD includes a copy of the Lame encoder that Alpha Player probably uses to create compressed music files (EMP files) on your HD. You can then play these files using Alpha Player. If you close Alpha Player you can use Windows Media player with no problem on my XP Professional system. It is interesting that there is no GPL notice relating to the use of Lame. There is also an ASPI folder containing various Adaptec ASPI driver files for 32-bit and 16-bit OS.

    Link | November 16th, 2005 at 1:12

14. ameyer17 wrote,

    The foo fighters cd has sunncomm DRM, not xcp DRM

    Link | November 16th, 2005 at 2:15

15. geoffrey wrote,

    Not all Foo Fighter releases have the Sunncomm, some also have the XCP. Depends on your location.

    Link | November 16th, 2005 at 2:48

16. James Mok's Soliloquy wrote,

    I’ll Never Buy Another Sony Product

    Update (16/11/05 10:50am)</b> : Sony BMG pulled all DRM rootkit CDs and offer swaps. Affected CDs listed here. Too little too late. Damages have been done. They got caught this time. Who knows when there’ll be another BS like this…

    Link | November 16th, 2005 at 4:10

17. Masher1 wrote,

    Every (SONY) Disk from now untill they sell the music arm of there machine they will never sell me another cd DVD or any other “Thing” (SONY) they crossed a very expensive line with LOTS of folk that keeps there world in motion DIE (SONY) DIE

    Link | November 16th, 2005 at 7:12

18. Masher1 wrote,

    PS DIE a horific death for our amusement

    Link | November 16th, 2005 at 7:14

19. howard wrote,

    Sunncomm or XCP, makes no difference to me. They’re both annoying (and too easy to get around to be worth whatever Sony wasted on them).

    An aside, though: am I the only one that thinks it’s ironic that a Pete Seeger collection is on this list?

    “This music is my music, this music is your music… wait — no, it’s just ours.”
    -Sony

    Link | November 16th, 2005 at 7:59

20. Perttu wrote,

    I see Amerie’s Touch is on the list of “protected” CD’s… Funny thing, just last night I downloaded it using P2P (perfectly legal in my country, by the way). No DRM there so why does Sony insist on treating their PAYING CUSTOMERS only as 1) criminals and 2) potential criminals?

    Link | November 16th, 2005 at 8:42

21. lowellt wrote,

    Time for these artists to find new management. And I was so interested in the new Santana release.

    Link | November 16th, 2005 at 15:23

22. geoffrey wrote,

    I’ve just received a report that Bette Midler Sings the Peggy Lee Songbook contains the XPC rootkit. However, I have had mixed luck in finding a secondary source for this (I’ve given up using Amazon as one of my sources).

    Does anyone own this CD to confirm this?

    Link | November 16th, 2005 at 19:31

23. angsuman wrote,

    I found this quest rather interesting and so I created two simple tools - one to search for non-copy-protected cd’s only and another to search for copy protected cd’s only using amazon database.

    However this covers all copy-protection and is not limited to sony xcp toolkit as your listings are.

    Link | November 16th, 2005 at 19:50

24. dleighty wrote,

    If the EFF’s guidelines are sufficient to identify an XCP disc, I own quite a few that I haven’t seen listed anywhere.

    Off the top of my head, these include reissues of Rosanne Cash’s King’s Record Shop and Interiors, and Earl Scruggs’ I Saw The Light With Some Help From My Friends (all Columbia/Legacy titles). I haven’t confirmed this, as I immediately killed the popup that appeared when I put one in my PC and no software was installed (AFAIK), but they all have the XCP URL printed on the back panel.

    Link | November 16th, 2005 at 23:26

25. geoffrey wrote,

    If you can confirm it I would appreciate it.

    Just as a FYI, if you disable autorun I believe the XCP software will not run and the DRM essentially becomes legless.

    That, or install Linux like me.

    Link | November 16th, 2005 at 23:43

26. dleighty wrote,

    I’ve got Windows XP. It ignores your auto-run settings whenever it feels like it.

    Someone on the ICE Magazine’s reader forum echoes the warning about the Rosanne Cash reissues. Another adds the recent Leo Kottke and Mike Gordon collaboration. Yet another landmine to watch out I don’t step on…

    Link | November 17th, 2005 at 3:46

27. silvertop wrote,

    What DRNM protection has been used on discs sold in the Uk or on ‘cover’ discs with newspapers?

    Link | November 17th, 2005 at 19:59

28. dleighty wrote,

    http://cp.sonybmg.com/xcp/english/titles.html now lists the Rosanne Cash and Earl Scruggs reissues. Leo Kottke is Suncomm, though.

    Link | November 17th, 2005 at 20:13

29. Greg wrote,

    if you have this problem, how do you get rid of it? i played the new Santana All That I Am on my laptop, it automatically installed some new software, instead of just playing it on my Itunes and when i go to my add/remove programs to get rid of it, it doesn’t show up anywhere…oh, it won’t play on my itunes, or windowsmedia either, although my girlfriend played it just fine on her MAC…i’m going MAC next time FOR SURE…ugh

    Link | November 17th, 2005 at 22:08

30. Xpecktor8 wrote,

    If you believe in the theory of the Free Market, as all good Americans do… then Sony is in line for an extensive boycott of all labels and music. It should be made clear to them, in the universal language of business, what people think of this intrusion.

    Furthermore, the musicians need to understand that there is a price to be paid for allowing such representation to effect their customers. Write them and tell them what you think of Sony’s tactics.

    Boycott Sony: Long Live the Free Market!!

    Link | November 18th, 2005 at 0:56

31. sithlord wrote,

    you’re right, boycott sony’s CDs. and if you live in a country where MP3 download are not illegal (like Spain or some other countries), just do it! they’ve gone too far this time, some virus writers have alerady use the rootkit so it is no more “copy-protection program” it’s a backdoor program!

    Link | November 18th, 2005 at 17:58

32. meg wrote,

    Why is the Santana CD crossed off? It certainly does have the rootkit on it and it destroyed my hard drive when I tried to make one copy of it!

    Link | November 18th, 2005 at 19:57

33. Heathen wrote,

    I got it from Santana’s “Shaman” album purchased at Borders.

    Link | November 19th, 2005 at 1:55

34. David wrote,

    Since I never got the Neil Diamond 12 Songs CD to play to begin with -thus not pressing any “agreement” button, is there still a chance this rootkit was NOT installed on my computer?

    Link | November 19th, 2005 at 2:44

35. Al wrote,

    Sony has lost all respect i ever had for them. I will never purchase another of their products even if they have nothing to do with music play. They have belied their customers trust and have resorted to underhanded methods to get what they want instead of retiring their stupid asses int the room to come up with something better.

    Doesn’t everybody feel like going out and purchasing legal music now?

    Piracy will laways be there and it will take a more inovative approach to deal with it than treating your customers and loyal music fans as felons.

    I have over 400 CD’s with legally purchased in the store titles. What a sap I was. Well it has all stopped since 2 years ago and I refuse to support this @#$% industry anymore.
    I will make it my business to warn others who don’t know of this rootkit stuff and advise them to check ALL labels that may have any affiliation with SONY/BMG etc etc.

    Or maybe I’ll recommend a complete boycott and download all their tunes outside the home at internet cafes like so many do now.

    Really pO’d

    Link | November 20th, 2005 at 14:29

36. Brian wrote,

    A boycott is definitely in order here. If Sony’s aim is to get me to purchase their CDs, they’ve failed miserably. I routinely rip CDs to my hard drive FOR MY PERSONAL USE. Much more convenient to play off the hard drive with my entire collection in shuffle than to reload cds one at a time. That’s not illegal, and should certainly not be an invitation for Sony to put any type of DRM software on my system.
    I don’t plan on resorting to illegal downloads, but I can certainly make it clear to A) Sony that they’ve lost my business and B) the artists that they’ve also lost my business. I don’t like the idea of my $2000.00 computer being damaged because I followed the rules and bought a CD legally.

    Link | November 21st, 2005 at 13:25

37. leon wrote,

    totally agree with brian. you try and toe the line and this s**t happens. following on from what he said tho, i think my computer is ruined! HELP!!!!!!! i aint to computer literate at all, but since installing the ‘ a static lullaby’ cd, my cd drives have vanished. dont know if the updates from microsoft have been installed -hasnt shown up on any scans, etc. tried downloading all kinds of stuff, just hoping something will work. we’ve tried searching for and installing the drivers, but to no avail. they’ve TOTALLY vanished and therefore drives are useless! and to top it off i bought the cd on import,so no ‘exchange’ so i guess i’m stuck with this useless pile of bile forever (the cd’s crap anyway)!!!. if ever theres a case FOR illegal downloads this has got to be it!!! so if anyone can help inany way possible i’d be eternally grateful.

    Link | November 22nd, 2005 at 0:37

38. DJ wrote,

    I can understand boycotting Sony - If I didn’t already own a PSP I’d be right with you. However, don’t blame the artists for this copy-protection being on their CDs, as sony apparently never told them. Switchfoot, for instance, didn’t find out about the copy protection until it was in stores, and posted instructions on circumventing it on their own message board.

    Link | November 22nd, 2005 at 18:23

39. Vince Wylde wrote,

    Come on. Haven’t these idiots figured out YET that there will ALWAYS be a way to MP3 things? Such as, oh, I don’t know, AUDIOGRABBER?

    Link | November 23rd, 2005 at 1:40

40. Karl Schreiber wrote,

    @ leon

    Try these web sites for a cure:

    http://www.sysinternals.com/Utilities/RootkitRevealer.html

    http://www.f-secure.com/blacklight/cure.shtml
    http://www.europe.f-secure.com/exclude/blacklight/blbeta.exe

    Link | November 23rd, 2005 at 13:44

41. Luci wrote,

    In my humble opinion, BOYCOTT!!!!!!!!

    not just their cd’s, but everything, TVs, stereos, dvds,movies, contracted artists
    what they did was criminal(in my opinion), others have been prosecuted with no mercy, I see no reason why they deserve any mercy

    BOYCOTT!!!!!!!!!!!!!!!!!!!!!!!!

    Link | November 25th, 2005 at 18:29

42. Ann MM wrote,

    I bought a copy of Chayanne’s Cautivo in the dual disc format. It does not appear to be afflicted with the rootkit - on the audio side there are only files with names like Track01.cda.

    I also own a copy of Life by Ricky Martin, which says on the back cover of the cd case it has the xcp software, but the cd itself only has files like Track02.cda.

    On the other hand, I bought a copy of Santana’s new offering, All I Am, and there is a whole mess of folders and non-audio files visible on Explore of the cd drive.
    The back of the jewel case has a Sunncomm.com url.

    Husband and I have been considering the purchase of some new electronics, a new television… Since the Santana cd installed its software ~before~ the EULA was refused, SONY is ~NOT~ going to be the maker of our purchases.

    Further, I intend to go back to the store and speak to the manager about segregating albums with DRM in a separate section.

    If it has DRM on it, it isn’t a proper CD, anyway, is it?

    Link | December 4th, 2005 at 6:54

43. Mark wrote,

    The above link doesn’t seem to work any more. I have another one to add to the list. Britney Spears “In The Mix - The Remixes” which came out November 22, 2005 (according to Amazon) has the cr*p on it. It should be added to the list. Wish I had known before I bought it

    On a related note, the boycotting concept sounds good but it won’t work, all that will happen is the RIAA will announce sales are lower for copy-protected works, thereby “proving” that piracy is rampant. You might ask how that proves the point but the truth has no meaning in the world of profits and companies that hate their customers.

    Link | December 5th, 2005 at 18:21

44. Mark wrote,

    The protected albums say that only Windows Media Player can play/copy them.. I wonder what the other media player/ripper mfg’s think about that.

    Link | December 5th, 2005 at 18:40

45. Lilith wrote,

    I failed in burn mp3 cds after i installed SonicStage cd. May this be XPC? Someone have this s*** installed to confirm?
    and sorry for my english…

    Link | January 2nd, 2006 at 17:30

46. Mike wrote,

    i know of two other disks that are affected:
    good charlotte: chronicles of life and death
    avril lavinge: under my skin

    good charlotte just doesn’t play on a computer, it sounds damaged, but isn’t

    avril lavinge installed ‘alpha player’. i’m noy sure what this is but it doesn’t sound good.

    Link | January 17th, 2006 at 9:36

47. Hannah wrote,

    Yep…

    Speak softly and carry a cellular phone.
    …

    Link | October 31st, 2006 at 23:54

48. Andy Hedges’ Tech Blog » Blog Archive » Corrupt CDs wrote,

    […] Record companies are doing this to limit consumers use of their music (i.e. you have to buy the music once for your CD player and then once again for your iPOD) and secondly to try to stop unauthorised distribution of their copyrighted music. Whilst I can financially understand their motivation for the first reason and morally agree with their second this tactic will not help them. Firstly, those individuals who want to play their CD in the PC, car, hi-fi and iPOD are going to be pissed off when it doesn’t work in most their players and stop buying CDs. Secondly, those people who want to pirate music will not be stopped by these technologically pathetic schemes to limit copying. YMMV Update 11-Nov-2005: Sony has gone one step further and put a rootkit (malicious code) on 20 of its CDs to stop you coping them with your PC. However the rootkit leaves your PC wide open to viruses; this is even if you haven’t tried to copy the CD. So if you value your computer’s security don’t put any Sony CDs in your CD drive without being sure they don’t contain this rootkit. More information on this is available from the wonderful BBC. Update 15-Nov-2005: idiot abroad says he has found no fewer than 47 titles containing Sony’s DRM rootkit. They are spread across several sub-labels owned by Sony-BMG. Geoffrey has posted the list of rootkit-infected titles he’s uncovered so far in his blog. […]

    Link | December 3rd, 2006 at 21:46

49. w8er wrote,

    The ‘No Roots’ CD from ‘Faithless’ also installed ‘alpha player’ on my system, contrary to what is stated on the settec website I wasn’t even presented a EULA before the installation took place.

    Especially after reading the article, referred to at the top of this page, it really angers me. As a consumer I feel violated in my privacy- and property- (over my computer system) rights.

    So the next time I’m interested in a Sony disc I’ll probably just download it, at least this saves me from the Sony-spyware.

    Link | December 13th, 2006 at 9:17

50. Pat wrote,

    I AM PISSED!!!! I purchased 2 Vivian Green CD’s and i am un able to listen to either of them!!!!I use my mac or my ipod to listen to my music and these two cd’s are useless!!! I threw the receipts away and now im out 35 to 40 bucks!!! This really sucks!!!!!!!!!

    Link | January 8th, 2007 at 3:09

51. gdm wrote,

    Faithless? Oh no, I’m really depressed right now. I’m a big Maxi Jazz fan.

    Link | January 9th, 2007 at 10:30

52. tina helen wrote,

    They’ve gone too far this time, some virus writers have alerady use the rootkit so it is no more “copy-protection program” it’s a backdoor program!

    Link | April 26th, 2007 at 5:47

53. Jamie wrote,

    I recieved a Sony BMG CD on that list as a present,
    and i get an Alpha Player come up, ok i said its just its own media player. Close. Open up Windows Media and all the tracks are only 10 seconds long! None of them are portions of the CD track listing but of a hidden Track.
    So its impossible for me to listen to it using Windows Media Player.

    So i reopened the Alpha Player and clicked the encode button so i could have them in ATRAC format for my SONY WALKMAN (Another one of their products!!) their standard format and all i get is the contents of the disc copied to my hardrive as well as the songs in EMP format.

    Ah ha i thought i have my music tracks! but no i dont they refuse to play and this EMP format is uncompatible with their media player SonicStage!

    I own this CD so i should be able to make copies, i thought DRM was all about stoping illegal copies being made, i am perfectly within my rights to copy a CD that i own to my computer for use on my portable player.

    Anyone got a workaround for this ?

    Link | May 20th, 2007 at 18:52

54. Jamie wrote,

    I think its time to install limewire and get resort to illegal downloading of their tracks, the opposite of wat they wanted poeple to do!

    I will no longer buy any SONY albums, and i will tell people not to buy them for me just write down the track listing and then im gona download them.

    No Sony Spyware or Viruses this way.

    Link | May 20th, 2007 at 18:59

55. Ben parker wrote,

    I intend to go back to the store and speak to the manager about segregating albums with DRM in a separate.

    Link | August 20th, 2007 at 10:41

56. Nick wrote,

    I just thought I would comment with a cd not listed on this site or Sony’s made by Dreamworks with XCP, Powerman 5000’s “Transform”

    Link | October 26th, 2007 at 20:53

57. merv wrote,

    I have just joined the digital age with an iPod and tried to copy my Kasabian CD to mp3 (unsuccessfully).
    I then searched the web and found all the issues noted above.
    The talk of root kits etc. does not sound like a good thing so have I unwittingly screwed my PC?

    All I want is to listen to the tunes!

    Any comments would be welcome.

    Link | November 21st, 2007 at 23:01

58. Sony Alpha wrote,

    I agree with you.

    Link | June 18th, 2008 at 3:07

59. laptop battery wrote,

    [….]your blog is nice.A good read.[….]

    Link | August 11th, 2008 at 1:42

Leave Your Comment