Winamp/gracenote using rootkit?

[ms...@yahoo.com]

When I stick in a new CD and have winamp play it, a window pops up
stating "Retrieving CD Information...Powered by Gracenote CDDB..."

A few problems:

It is not obvious how to disable this, and once disabled (supposedly),
it is not easy to verify.

Why? Because if you use NeoMonitor or netstat to monitor your internet
connections before you disable it, WinAmp is accessing the internet in
a way that is invisible to both neomonitor and netstat.

This seems to me to be evidence of a SONY like rootkit?

Anybody know what port winamp is using? What IP address it is going
to?

How to disable (according to USENET...but no way to verify since winamp
is going to the internet in stealth mode...):

Options->Preferences->General Preferences->Select your internet
connection type: ->Not connected to the internet

(NOTE: This does disable the gracenote/winamp window from popping up,
but may not disable internet accesses reporting what CDs you have
played on your computer.)

[sabin]

That's my first contribution to this precise newsgroup, and may be my
last, so don't bother reply me. Though, take my advice, don't see there a
rootkit, it's a very simple Linux component, present in the options or in
the list of the plugins. I can't tell you where precisely since it's been
more than one year I stopped using windows for Linux's sake, but I
remember that I could easily turn off that function :)

So search a bit more in the options dude, don't be too afraid :)

Sabin