The rootkit scan of Spybot Beta 2.070, build 20120207 lists arrow_n.cur as positive under a fully patched Windows XP.

I can't imagine that an arrow is something executable. It seems to be a false-positive.

Shall I send you a copy of this arrow?

Kind regards
Turan Fettahoglu

P.S. Ich spreche auch deutsch.