First Trojan using Sony DRM spotted | The Register

"Sony-BMG's rootkit DRM technology masks files whose filenames start with '$sys$'. A newly-discovered variant of of the Breplibot Trojan takes advantage of this to drop the file '$sys$drv.exe' in the Windows system directory."