Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!uunet!seas.gwu.edu!fc173108 From: fc173108@seas.gwu.edu (Iqbal Qazi) Newsgroups: comp.windows.ms Subject: Re: re Windows "virus" (Was Cursor ...) Summary: What! A virus! Are you sure! Message-ID: <2286@sparko.gwu.edu> Date: 30 Oct 90 22:18:06 GMT References: <90303.144132LK-AP@finou.oulu.fi> Reply-To: fc173108@seas.gwu.edu () Organization: The George Washington University, Washington D.C. Lines: 28 In article <90303.144132LK-AP@finou.oulu.fi> LK-AP@finou.oulu.fi writes: >Hello netreaders [stuff deleted] > I read (from NetNews) that there might be (troyan) virus in Curse. > (I am not sure about the name, but it is mousecursor changer.) > > The article said that there was some suspicious stuff in prg code, > connected with HD partition tables. > > Curse will be real curse if it will mix your HD partition table. > > I hope i am not right. Have a nice day and sleep well, I don't think you are. I've been using the Curses program from cica for about a month and have had *no* problems with it. My hard disk is still intact and I do sleep well (well, not after thinking about this virus thing). I ask the author of the original author to please find out which program was being talked about. As to Curses modifying WIN.INI: if you think about it, how else would a program "install" itself to run when Windows starts up? Just think about it. Sure maybe it should have explicitly said so but come on... Iqbal