Removing the rootkit

Removing the rootkit

Posted Nov 15, 2005 21:19 UTC (Tue) by carey (guest, #19902)
Parent article: Sony's rootkit: an update

According to Mark Russinovich's blog, the safe way to remove the rootkit is to run this command and reboot:

sc delete $sys$aries

This is more or less equivalent to this, on Debian:

update-rc.d -f '$sys$aries' remove

---

(Log in to post comments)