So how many CDs actually contain XCP, Sony BMG's notorious DRM consumer assault weapon? And which ones?

Sony says that only 20 titles (http://www.usatoday.com/money/industries/technology/2005-11-10-sony-hackers_x.htm?POE=NEWISVA), which it refuses to name, contain the XCP virus - software which attacks music piracy by attacking your PC. But is it being economic with the actualité?

Reg reader Geoffrey McCaleb has found no fewer than 47 titles containing Sony's DRM rootkit. They are spread across several sub-labels owned by Sony-BMG, so it looks like a little finessing is going on.

Geoffrey has posted the list of rootkit-infected titles he's uncovered so far in his blog (http://www.idiotabroad.com/?p=58).

Sony BMG's woes continued yesterday with Microsoft's decision that the DRM software contained on infected CDs, counted as "malicious software under the rules it uses to define what Windows should be protected against", the BBC reports (http://news.bbc.co.uk/1/hi/technology/4434852.stm).

Sony has suspended production of CDs incorporating XCP copy protection, but the PR nightmare continues: class action lawsuits in California mean the record giant will be cleaning this oil slick for months to come. ®

Related stories

How fat is my DRM? (20 December 2006)
http://www.theregister.co.uk/2006/12/20/sony_rootkit_drm_settlement/
Researcher: Sony BMG rootkit still widespread (16 January 2006)
http://www.theregister.co.uk/2006/01/16/sony_bmg_rootkit_still_widespread/
Sony BMG 'diligently re-evaluates' CD anti-piracy tech (12 December 2005)
http://www.theregister.co.uk/2005/12/12/sony_anti-piracy_review/
Sony opens up over another CD security hole (7 December 2005)
http://www.theregister.co.uk/2005/12/07/sony_cd_security/
Sony's DRM woes worsen (30 November 2005)
http://www.theregister.co.uk/2005/11/30/sony_drm_spitzer/
Sony fiasco: More questions than answers (23 November 2005)
http://www.theregister.co.uk/2005/11/23/sony_drm_questions/
Sony unsinged by rootkit CD fiasco (22 November 2005)
http://www.theregister.co.uk/2005/11/22/analysis/
Texas puts Sony BMG in its sights (22 November 2005)
http://www.theregister.co.uk/2005/11/22/texas_sues_sony_bmg/
Sony's CD rootkit infringes DVD Jon's copyright (18 November 2005)
http://www.theregister.co.uk/2005/11/18/sony_copyright_infringement/
Sony DRM uninstaller 'worse than rootkit' (17 November 2005)
http://www.theregister.co.uk/2005/11/17/sony_drm_uninstaller_peril/
Sony in USB lead porn punt shocker (17 November 2005)
http://www.theregister.co.uk/2005/11/17/sony_usb_offer/
Sony pulls rootkit DRM CDs (16 November 2005)
http://www.theregister.co.uk/2005/11/16/sony_withdraws_xcp_cds/
Sony in internet 'price-rigging' rumpus (15 November 2005)
http://www.theregister.co.uk/2005/11/15/sony_variable_pricing/
Sony suspends rootkit DRM (12 November 2005)
http://www.theregister.co.uk/2005/11/12/sony_suspends_rootkit_drm/
Sony BMG faces digital-rights seige (11 November 2005)
http://www.theregister.co.uk/2005/11/11/secfocus_sony_analysis/
Sony hit by lawsuits over root kit (10 November 2005)
http://www.theregister.co.uk/2005/11/10/sony_sued_for_rootkit/
First Trojan using Sony DRM spotted (10 November 2005)
http://www.theregister.co.uk/2005/11/10/sony_drm_trojan/
Sony digital boss - rootkit ignorance is bliss (9 November 2005)
http://www.theregister.co.uk/2005/11/09/sony_drm_who_cares/
Hidden DRM code's legitimacy questioned (3 November 2005)
http://www.theregister.co.uk/2005/11/03/secfocus_drm/
Removing Sony's CD 'rootkit' kills Windows (1 November 2005)
http://www.theregister.co.uk/2005/11/01/sony_rootkit_drm/
EMI recalls DRM-encumbered CD (29 September 2005)
http://www.theregister.co.uk/2005/09/29/emi_recalls_drm_cd/