[原文]The aries.sys driver in Sony First4Internet XCP DRM software hides any file, registry key, or process with a name that starts with "$sys$", which allows attackers to hide activities on a system that uses XCP.
Sony CD First4Internet XCP DRM aries.sys Local File/Process Manipulation
Local Access Required
Loss of Integrity
The First4Internet XCP DRM software used to playback Sony copy-protected music CDs contains a flaw that may allow a malicious user to arbitrary manipulate local files and processes. The problem is that the 'aries.sys' driver hides any files, registry keys and/or processes with a name that starts with '$sys$', which may allow a malicious user to hide certain activities on a system that uses XCP resulting in a loss of integrity.
Currently, there are no known workarounds or upgrades to correct this issue. However, First 4 Internet has released a patch to address this vulnerability. It is reported that this patch still does not allow a user to uninstall the First4Internet software though.