Path: utzoo!utgpu!watserv1!watmath!att!att!bu.edu!rpi!uupsi!sunic!nuug!ulrik!ulrik!rodrigol
From: rodrigol@ulrik.uio.no (Rodrigo Lopez)
Newsgroups: comp.windows.ms
Subject: Re: re Windows "virus" (Was Cursor ...)
Message-ID: <1990Nov1.120319.8307@ulrik.uio.no>
Date: 1 Nov 90 12:03:19 GMT
References: <90303.144132LK-AP@finou.oulu.fi> <2286@sparko.gwu.edu>
Sender: news@ulrik.uio.no (USENET News System)
Reply-To: rodrigol@ulrik.uio.no (Rodrigo Lopez)
Organization: University of Oslo
Lines: 42

In article <2286@sparko.gwu.edu>, fc173108@seas.gwu.edu (Iqbal Qazi) writes:
> In article <90303.144132LK-AP@finou.oulu.fi> LK-AP@finou.oulu.fi writes:
> >Hello netreaders
> 
> [stuff deleted]
> 
> >   I read (from NetNews) that there might be (troyan) virus in Curse.
> >   (I am not sure about the name, but it is mousecursor changer.)
> >
> >   The article said that there was some suspicious stuff in prg code,
> >   connected with HD partition tables.
> >
> >   Curse will be real curse if it will mix your HD partition table.
> >
> >   I hope i am not right.           Have a nice day and sleep well,
> 
> I don't think you are.  I've been using the Curses program from cica
> for about a month and have had *no* problems with it.  My hard disk is
> still intact and I do sleep well (well, not after thinking about this
> virus thing).  
> 
> I ask the author of the original author to please find out which
> program was being talked about.
> 
> As to Curses modifying WIN.INI:  if you think about it, how else would
> a program "install" itself to run when Windows starts up?  Just think
> about it.  Sure maybe it should have explicitly said so but come on...
> 
> Iqbal

Another thing to remember is that if one is using win 3.0 in 386 enh mode and 
with a user defined virtual memory disk, windows makes this area fixed. That is
to say unmoveable blocks.

***************************************************************************
* RODRIGO LOPEZ SERRANO              Biotechnology Centre of Oslo         *
* Tel: xx-02-958766                  Gaustadalleen 21                     *
* Fax: xx-02-694130                  P.B. 1125 Blindern                   *
* rodrigo.lopez@use.uio.no           0316 Oslo 3 Norway                   *
* rodrigo.lopez%use.uio.uninett@nac.no                                    *
* rodrigol@ulrik.uio.no                                                   *
***************************************************************************