I recently bought a secondhand copy of a CD that was part of the Sony "Rootkit Scandal" in 2005. I assume it to be infected until proven otherwise. Am I safe to try to rip this on my PC with modern AV software to protect me?
This software is installed automatically only when AutoRun is enabled. This was a security issue anyway and thus disabled on Windows XP, IIRC. In recent versions of Windows, you have to explicitly confirm that you want to run the AutoRun program, in the AutoPlay dialog. Please note that double-clicking on the drive in Explorer might also launch the program.
According to this guide, you also have to accept an EULA before the DRM rootkit is installed.
So it’s rather unlikely this would still work today—unless you actively ignore all safety measures, of course.