How to Remove the Sony Rootkit XCP Uninstaller

Posted November 29, 2005 by AlexTheBeast in Windows spyware

The Sony rootkit creates a security problem on your system. Sony’s rootkit uninstaller installs software that can make your system vulnerable to security exploits as well. Here is how to remove the uninstaller.

When news of Sony’s rootkit first was made public, Sony released a rootkit uninstaller. Unfortunately, this rootkit uninstaller had security problems as well. Using this manual method works best.

1. Browse to this folder:
\windows\Downloaded Program Files\

2. Find the file named CodeSupport Control.
3. Right-click on it, and select Remove.
4. Confirm that it is okay for removal.
5. The software will be removed.

If in step one you do not find the file, you should search you system to make sure it is not there. If you have more than one installation of Windows, I would search in all installations. My Vista installation had the CodeSupport software installed, although I never installed the rootkit uninstallation software there. This is probably because the rootkit uninstallation software installs itself everywhere it sees a \windows directory.

Use the following steps to search your system for the CodeSupport files:
1. Click Start.
2. Click Search.
3. Search for codesupport in all or part of the filenames.
4. Once search finds it, right-click and select Remove as directed above.

If you do not find the files, you likely never installed Sony’s rootkit removal software.

Please note that Sony’s directions for removal are actually wrong. They tell you to remove a file called codesupport. The file is actually CodeSupport Control.

The Conversation

Follow the reactions below and share your own thoughts.