CAD discussion forum - ask any CAD-related questions here, share your CAD knowledge on AutoCAD, Inventor, Revit and other Autodesk software with your peers from all over the world. To start a new topic, choose an appropriate forum.
Please abide by the
rules of this forum.
This is a peer-to-peer forum. The forum doesn't replace the official direct technical support provided by ARKANCE for its customers.
How to post questions: register or login, go to the specific forum and click the NEW TOPIC button.
| Author |
 Topic Search  Topic Options
|
mohd fahmi 
Newbie
Joined: 16.May.2012
Location: Malaysia
Using: AutoCAD2007
Status: Offline
Points: 1
|
 Topic: Cambodia virus
Posted: 16.May.2012 at 05:38 |
|
Hi..
Someone please help me.How to remove cambodia virus on autocad..please help me
Tq
Edited by mohd fahmi - 16.May.2012 at 07:16
|
 |
John Connor
Senior Member
Joined: 01.Feb.2011
Location: United States
Using: AutoCAD 2018
Status: Offline
Points: 7175
|
Posted: 16.May.2012 at 11:48 |
|
Cambodia virus? AutoCAD?
Never heard of it.
Could we get more information? What does this virus do? How is it delivered?
Never mind.
You're talking about the ALS.Bursted.B virus. Hasn't this been mentioned in a white paper at the AutoDesk website?
Edited by John Connor - 16.May.2012 at 12:02
|
"Humans have a strength that cannot be measured. This is John Connor. If you are reading this, you are the resistance." <<AutoCAD 2015>>
|
|
John Connor
Senior Member
Joined: 01.Feb.2011
Location: United States
Using: AutoCAD 2018
Status: Offline
Points: 7175
|
Posted: 16.May.2012 at 12:06 |
|
As posted at the AutoCAD 2007 Discussion Groups:
According to this post on the Symantec website, ALS Bursted creates copies of the acad.lsp file:
"ALS.Bursted.A is a virus that is written in the AutoCAD AutoLisp scripting
language. The virus will be received as a text file named acad.lsp in the
same directory as an AutoCAD drawing file (.dwg). When the drawing file is
opened, the acad.lsp file is automatically loaded by AutoCAD which causes
the virus to be executed.
The virus first locates and reads the file base.dcl in the AutoCAD search
path. It uses this file to locate the acad.lsp file in the AutoCAD Support
directory. The virus then reads the acad.lsp file to check for the presence
of the string "acadapp". If the string is not found, the virus copies itself
over as acadapp.lsp. Due to a bug in the virus, the check always fails.
Next, the virus checks if the name of the drawing file is Drawing.dwg (this
is the default name for a new drawing file). If this check fails, the virus
copies itself to the folder as acad.lsp."
|
"Humans have a strength that cannot be measured. This is John Connor. If you are reading this, you are the resistance." <<AutoCAD 2015>>
|
|
John Connor
Senior Member
Joined: 01.Feb.2011
Location: United States
Using: AutoCAD 2018
Status: Offline
Points: 7175
|
Posted: 16.May.2012 at 12:12 |
|
Your antivirus program should have found and deleted the virus. Haven't you kept your av program up-to-date with the latest virus definition files? Here are removal instructions posted by Symantec.
http://www.symantec.com/security_response/writeup.jsp?docid=2005-111717-2608-99&tabid=3
I'll bet that if you look hard enough you may even find a removal tool, for free, has been posted by one of the makers of a major antivirus program such as AVG.
Now, stop with the panic mode and get to work cleaning your system up. And in the future be more careful where you download AutoCAD related content from. Upgrade your anti-virus program too!
You owe me. Free virus removal tool at Sophos....
http://www.sophos.com/en-us/threat-center/threat-analyses/viruses-and-spyware/AL~Bursted-B.aspx
Edited by John Connor - 16.May.2012 at 12:27
|
"Humans have a strength that cannot be measured. This is John Connor. If you are reading this, you are the resistance." <<AutoCAD 2015>>
|
|
heinsite
Senior Member
Joined: 05.Feb.2009
Location: United States
Using: AutoCAD 2014
Status: Offline
Points: 640
|
Posted: 16.May.2012 at 21:11 |
Crack that whip, John!
Dave
|
|
Dave Hein, P.E.
Hawaii District Engineer
Kona International Airport
AutoCAD Certified Professional
Autodesk Expert Elite
|
|
John Connor
Senior Member
Joined: 01.Feb.2011
Location: United States
Using: AutoCAD 2018
Status: Offline
Points: 7175
|
Posted: 17.May.2012 at 00:10 |
|
Somehow he found this site but can't find out how to remove a virus even though he had part of the name. I find that....unusual.
|
"Humans have a strength that cannot be measured. This is John Connor. If you are reading this, you are the resistance." <<AutoCAD 2015>>
|
|
![CAD Forum - tips, tricks, discussion and utilities for AutoCAD, Inventor, Revit and other Autodesk products [www.cadforum.cz]](/common/arkance_186.png "CAD Forum - tips, tricks, discussion and utilities for AutoCAD, Inventor, Revit and other Autodesk products [www.cadforum.cz]")
Discussion forum
Cambodia virus
Tweet
