Only recently has Sony’s website officially announced withdrawal of its compact discs with XCP software. But the company’s efforts to take the rootkit- and spyware-infected music CDs off the shelves in the US market seems to be full of gaps. According to a leading consumer magazine, most of the malls in the United States are still selling Sony CDs with XCP rootkits and sales managers are claiming that they have not been asked to remove them. There are increasing reports of consumers fuming over Sony CDs, bought on Christmas Eve, that were loaded with spyware, which the consumers say is infecting music. Sony had initially thought that the loading of its CDs with spyware was a good preventive measure against piracy but had agreed to withdraw such CDs after consumer complaints. But to the chagrin of many consumers, the market is still flush with these “damaged” products. Sony’s reason for using the spyware has already been legally challenged by Texas Attorney General Greg Abbott, who has charged Sony with violating the state’s anti-spyware laws by embedding software in its CDs and media players to monitor users’ habits. Whatever happens next, Sony’s reputation has taken a beating in the minds of many consumers.