Checking for the XCP Rootkit
Here’s a quick procedure to check whether you’ve been infected by Sony’s XCP rootkit:
- create a folder named
test - rename it to
$sys$test
If the folder vanishes, you’re infected. Note that this only detects XCP, not MediaMax.