Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!wuarchive!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw
From: bien@venice.SEDD.TRW.COM (Frank E. Bien)
Newsgroups: comp.virus
Subject: CURSE.EXE Trojan ? ? ? (PC)
Message-ID: <0012.9011051415.AA12439@ubu.cert.sei.cmu.edu>
Date: 2 Nov 90 22:24:06 GMT
Sender: Virus Discussion List <VIRUS-L@LEHIIBM1>
Lines: 20
Approved: krvw@sei.cmu.edu

There has been a lot of discussion on comp.windows.ms about the
possibility of CURSE.EXE actually being an IBM trojan.  A while back I
saw an article in this newsgroup about CURSE.EXE destroying the FAT
table "after some amount of time" (?).

It seems quite a few people are having problems with CURSE. . . has
anyone actually determined if it is a trojan??  Is it just a poorly
written program??  When the program is run, this disk it is run from
seems to get a lot of "unmovable blocks" and lost file errors (when
looked at w/Norton 5.0).

cica.cica.indiana.edu has removed Curse from its archives. . .  but I
have a feeling many people downloaded it before it was removed.  Does
anyone know anything about this??

Thanks,

Frank Bien
TRW Computer Security Services
bien@venice.sedd.trw.com