The rootkit scan of Spybot Beta 2.070, build 20120207 lists arrow_n.cur as positive under a fully patched Windows XP.
I can't imagine that an arrow is something executable. It seems to be a false-positive.
Shall I send you a copy of this arrow?
Kind regards
Turan Fettahoglu
P.S. Ich spreche auch deutsch.
