Virus Threat - .ani files vs. CursorXP

Published on April 2, 2007 By Ingui In WinCustomize Talk

millwall_rangers originally posted this HERE but the title simply said CursorXP so I don't think it got as much attention as it deserved.

Number one because of the possibility of confusing the threat to Windows Animated Cursors with CursorXP. CursorXP is safe despite what at least one Blog initially said. The one linked in millwall's original post which has since been corrected.

And secondly because the ease of infection is so great with IE6 and 7 on WinXP and sources of infection seem to be multiplying so rapidly that Microsoft is going to issue an emrgency Patch tomorrow, April 3.

More at ZDNet

Microsoft's Bulletin

Ciao.

Comments

Bichur

on Apr 03, 2007

While CXP is a different format there may be an underlying issue. Seems to my nontechnical eyes CXP masks over the standard cursor (I guess that's why taking some screen shots you can see both), so if under your CXP is a regular cursor theme that uses .ani, possibly there is still risk (though hidden).

I've been wrong before.

Frogboy

on Apr 03, 2007

Ironically, users are safer using CursorXP than not.

Ingui

on Apr 03, 2007

OK. That makes sense. But CursorXP itself does not put your system at risk, it just doesn't make you any safer. Your at risk if you encounter the exploit wether you run CXP or not, correct?

Ingui

on Apr 03, 2007

You snuck in.

Ironically, users are safer using CursorXP than not.

Why?

Bichur

on Apr 03, 2007

Why?

yeah, I'm curious.
Does CXP replace or mask over the regular cursor?

If it masks, then would not an underlying .ani be suspect of causing problems?

Welcome Guest! Please take the time to register with us.
There are many great features available to you once you register, including:

Richer content, access to many features that are disabled for guests like commenting on the forums.
Access to a great community, with a massive database of many, many areas of interest.
Access to contests & subscription offers like exclusive emails.
It's simple, and FREE!