[Detector]

Sony's new DRM(Digital Rights Management) or 'cloaking' tool is designed to help keep users from copying CD/DVD's, but is leaving your PC wide open for a new Trojan.

Sony's CD's/DVD's have for some time now had their DRM which is meant to keep you from copying. The DRM code is installed when a user plays one Sony's copy-protected CDs in a computer. Any file with $sys$ in its name is then automatically hidden by Sony's copy-protection code, making it invisible on computers which have used CDs carrying Sony's cloaking tool.

The new Trojan(Tro/Stinx-E) takes advantage of this by copying itself to the name $sys$drv.exe which makes it invisible. The subject line on the spammed email is: Photo Approval Deadline. We have temporally blocked all .zip files until a solution can be found.