Media Alert: ZoneAlarm Customers Protected From Sony Rootkit Trojan

The new Trojan, named Win32.Outsbot.V by Zone Labs antiviruspartner Computer Associates (NYSE: CA), connects the compromised PC toan Internet chat relay server where it joins a bot net -- a network ofcompromised computers used by hackers to launch denial of serviceattacks and distribute spam and other malware.

Unlike reactive antivirus solutions that took days to offer usersa removal solution, ZoneAlarm's vanguard OSFirewall(TM) proactivelyprotected its users in advance by blocking the rootkit from gainingcontrol of the PC prior to its installation.

"This new exploit is a classic example of why consumers need to befully aware of all the software running on their PC. While weunderstand Sony's need to protect its digital rights, compromising thesecurity of their customers by using hacker-type technologies such asrootkits that create points of entry for actual hackers are not theanswer," said Laura Yecies, general manager at Zone Labs and vicepresident at Check Point. "We are committed to creating technologiesthat prevent stealth software from being installed without theknowledge and consent of consumers."

Rootkits are cloaking technologies that hide files, registry keys,and other system objects from diagnostic and security software on aPC, and they are usually employed by malicious software writersattempting to keep their files hidden. In this case the rootkit,developed by First 4 Internet, ships on Sony CDs as part of itsdigital rights management software. Sony is leveraging the rootkit'sability to hide the digital rights management software from users todeter them from bypassing or removing it. However, the presence of therootkit invites exploits from hackers that can also be hidden.

Users who play Sony CDs on their PC have no way of knowing thatthe rootkit has been installed. However, users of ZoneAlarm 6.0premium products are alerted to the original installation of therootkit and have the choice to stop the process. ZoneAlarm also allowsa user to halt the rootkit when it attempts to launch. These multiplelayers of security protect users against the rootkit install and anyviruses, Trojans, worms or other attack methods written to takeadvantage of its cloaking ability.

Media interested in learning more about proactive technologiesthat protect consumers against rootkits and Trojans can contact ZoneLabs PR at 415-633-4524 or press@zonelabs.com.

About Check Point Software Technologies Ltd.

Check Point Software Technologies Ltd. (www.checkpoint.com) is theworldwide leader in securing the Internet. It is the market leader inthe worldwide enterprise firewall, personal firewall and VPN markets.Through its NGX platform, the company delivers a unified securityarchitecture for a broad range of perimeter, internal and Web securitysolutions that protect business communications and resources forcorporate networks and applications, remote employees, branch officesand partner extranets. The company's ZoneAlarm product line is one ofthe most trusted brands in Internet security, creating award-winningendpoint security solutions that protect millions of PCs from hackers,spyware and data theft. Extending the power of the Check Pointsolution is its Open Platform for Security (OPSEC), the industry'sframework and alliance for integration and interoperability with"best-of-breed" solutions from over 350 leading companies. Check Pointsolutions are sold, integrated and serviced by a network of more than2,200 Check Point partners in 88 countries.

(c)2003-2005 Check Point Software Technologies Ltd. All rightsreserved. Check Point, Application Intelligence, Check Point Express,the Check Point logo, AlertAdvisor, ClusterXL, CooperativeEnforcement, ConnectControl, Connectra, CoSa, Cooperative SecurityAlliance, DefenseNet, Eventia, Eventia Analyzer, Eventia Reporter,FireWall-1, FireWall-1 GX, FireWall-1 SecureServer, FloodGate-1,Hacker ID, IMsecure, INSPECT, INSPECT XL, Integrity, InterSpect, IQEngine, Open Security Extension, OPSEC, OSFirewall, Policy LifecycleManagement, Provider-1, Safe@Home, Safe@Office, SecureClient,SecureKnowledge, SecurePlatform, SecuRemote, SecureXL Turbocard,SecureServer, SecureUpdate, SecureXL, SiteManager-1, SmartCenter,SmartCenter Pro, Smarter Security, SmartDashboard, SmartDefense,SmartDefense Advisor, SmartLSM, SmartMap, SmartUpdate, SmartView,SmartView Monitor, SmartView Status, SmartViewTracker, SofaWare, SSLNetwork Extender, Stateful Clustering, Triple Defense Firewall,TrueVector, Turbocard, UAM, User-to-Address Mapping, UserAuthority,VPN-1, VPN-1 Accelerator Card, VPN-1 Edge, VPN-1 Pro, VPN-1SecureClient, VPN-1 SecuRemote, VPN-1 SecureServer, VPN-1 VSX, VPN-1XL, Web Intelligence, ZoneAlarm, ZoneAlarm Pro, Zone Labs, and theZone Labs logo, are trademarks or registered trademarks of Check PointSoftware Technologies Ltd. or its affiliates. All other product namesmentioned herein are trademarks or registered trademarks of theirrespective owners. The products described in this document areprotected by U.S. Patent No. 5,606,668, 5,835,726, 6,496,935,6,873,988 and 6,850,943 and may be protected by other U.S. Patents,foreign patents, or pending applications.