Virus Threat - .ani files vs. CursorXP


millwall_rangers originally posted this HERE but the title simply said CursorXP so I don't think it got as much attention as it deserved.

Number one because of the possibility of confusing the threat to Windows Animated Cursors with CursorXP. CursorXP is safe despite what at least one Blog initially said. The one linked in millwall's original post which has since been corrected.

And secondly because the ease of infection is so great with IE6 and 7 on WinXP and sources of infection seem to be multiplying so rapidly that Microsoft is going to issue an emrgency Patch tomorrow, April 3.


More at ZDNet

Microsoft's Bulletin

Ciao.
4,981 views 5 replies
Reply #1 Top
While CXP is a different format there may be an underlying issue. Seems to my nontechnical eyes CXP masks over the standard cursor (I guess that's why taking some screen shots you can see both), so if under your CXP is a regular cursor theme that uses .ani, possibly there is still risk (though hidden).


I've been wrong before.
Reply #2 Top
Ironically, users are safer using CursorXP than not.
Reply #3 Top
OK. That makes sense. But CursorXP itself does not put your system at risk, it just doesn't make you any safer. Your at risk if you encounter the exploit wether you run CXP or not, correct?   
Reply #4 Top
You snuck in.

Ironically, users are safer using CursorXP than not.


Why?
Reply #5 Top
Why?


yeah, I'm curious.
Does CXP replace or mask over the regular cursor?

If it masks, then would not an underlying .ani be suspect of causing problems?