F-Secure have reported in their blog recently that a German version of the DVD film Mr & Mrs Smith starring Brad Pitt and Angelina Jolie contains copy protection that uses stealth techniques.
The DVD uses copy protection from Settec called Alpha-DVD which stops users from copying the DVD. Settec have made an uninstaller available. The F-Secure blog shows how Blacklight found a file called wtsap32.exe which was a hidden service. No files were been hidden which makes the rootkit a bit less dangerous. If it was able to hide files it could then have been used by criminals to hide their own files using the rootkit.
It is amazing to see companies still using techniques like this, especially after the Sony rootkit debacle that hurt their customer base and was a public relations nightmare.
The German edition of the DVD seems to be the only one affected.
Keep Safe
regards
Steo
www.antirootkit.com