CAD Forum - tips, tricks, discussion and utilities for AutoCAD, Inventor, Revit and other Autodesk products [www.cadforum.cz] ARKANCE | CONTACT - CZ | SK | EN | DE
Over 1.096.000 registered users (EN+CZ). AutoCAD tips, Inventor tips, Revit tips. Try the new precise Engineering calculator and the updated Barcode generator. New AutoCAD 2026 commands and variables.
RSS channel - CAD tips RSS tips
RSS discussions

Discussion Discussion forum

?
CAD discussions, advices, exchange of experience

CAD Forum - Homepage CAD discussion forum - ask any CAD-related questions here, share your CAD knowledge on AutoCAD, Inventor, Revit and other Autodesk software with your peers from all over the world. To start a new topic, choose an appropriate forum.

Please abide by the rules of this forum.
This is a peer-to-peer forum. The forum doesn't replace the official direct technical support provided by ARKANCE for its customers.
How to post questions: register or login, go to the specific forum and click the NEW TOPIC button.
  FAQ FAQ  Forum Search   Events   Register Register  Login Login

Topic ClosedCambodia virus

 Post Reply Post Reply
Author
mohd fahmi View Drop Down
Newbie
Newbie


Joined: 16.May.2012
Location: Malaysia
Using: AutoCAD2007
Status: Offline
Points: 1
Direct Link To This Post Topic: Cambodia virus
    Posted: 16.May.2012 at 05:38
Hi..

Someone please help me.How to remove cambodia virus on autocad..please help me

Tq

Edited by mohd fahmi - 16.May.2012 at 07:16
Back to Top
John Connor View Drop Down
Senior Member
Senior Member


Joined: 01.Feb.2011
Location: United States
Using: AutoCAD 2018
Status: Offline
Points: 7175
Direct Link To This Post Posted: 16.May.2012 at 11:48
Cambodia virus?  AutoCAD?

Never heard of it. 

Could we get more information?  What does this virus do?  How is it delivered?

Never mind.

You're talking about the ALS.Bursted.B virus.  Hasn't this been mentioned in a white paper at the AutoDesk website?


Edited by John Connor - 16.May.2012 at 12:02
"Humans have a strength that cannot be measured. This is John Connor. If you are reading this, you are the resistance."

<<AutoCAD 2015>>

Back to Top
John Connor View Drop Down
Senior Member
Senior Member


Joined: 01.Feb.2011
Location: United States
Using: AutoCAD 2018
Status: Offline
Points: 7175
Direct Link To This Post Posted: 16.May.2012 at 12:06
As posted at the AutoCAD 2007 Discussion Groups:

According to this post on the Symantec website, ALS Bursted creates copies of the acad.lsp file:

"ALS.Bursted.A is a virus that is written in the AutoCAD AutoLisp scripting

language. The virus will be received as a text file named acad.lsp in the
same directory as an AutoCAD drawing file (.dwg). When the drawing file is
opened, the acad.lsp file is automatically loaded by AutoCAD which causes
the virus to be executed.

The virus first locates and reads the file base.dcl in the AutoCAD search

path. It uses this file to locate the acad.lsp file in the AutoCAD Support
directory. The virus then reads the acad.lsp file to check for the presence
of the string "acadapp". If the string is not found, the virus copies itself
over as acadapp.lsp. Due to a bug in the virus, the check always fails.

Next, the virus checks if the name of the drawing file is Drawing.dwg (this

is the default name for a new drawing file). If this check fails, the virus
copies itself to the folder as acad.lsp."
"Humans have a strength that cannot be measured. This is John Connor. If you are reading this, you are the resistance."

<<AutoCAD 2015>>

Back to Top
John Connor View Drop Down
Senior Member
Senior Member


Joined: 01.Feb.2011
Location: United States
Using: AutoCAD 2018
Status: Offline
Points: 7175
Direct Link To This Post Posted: 16.May.2012 at 12:12
Your antivirus program should have found and deleted the virus.  Haven't you kept your av program up-to-date with the latest virus definition files?  Here are removal instructions posted by Symantec.

http://www.symantec.com/security_response/writeup.jsp?docid=2005-111717-2608-99&tabid=3

I'll bet that if you look hard enough you may even find a removal tool, for free, has been posted by one of the makers of a major antivirus program such as AVG.

Now, stop with the panic mode and get to work cleaning your system up.  And in the future be more careful where you download AutoCAD related content from.  Upgrade your anti-virus program too!

You owe me.  Free virus removal tool at Sophos....

http://www.sophos.com/en-us/threat-center/threat-analyses/viruses-and-spyware/AL~Bursted-B.aspx


Edited by John Connor - 16.May.2012 at 12:27
"Humans have a strength that cannot be measured. This is John Connor. If you are reading this, you are the resistance."

<<AutoCAD 2015>>

Back to Top
heinsite View Drop Down
Senior Member
Senior Member


Joined: 05.Feb.2009
Location: United States
Using: AutoCAD 2014
Status: Offline
Points: 640
Direct Link To This Post Posted: 16.May.2012 at 21:11
Crack that whip, John!
Clap
Dave
Dave Hein, P.E.
Hawaii District Engineer
Kona International Airport
AutoCAD Certified Professional
Autodesk Expert Elite
Back to Top
John Connor View Drop Down
Senior Member
Senior Member


Joined: 01.Feb.2011
Location: United States
Using: AutoCAD 2018
Status: Offline
Points: 7175
Direct Link To This Post Posted: 17.May.2012 at 00:10
Somehow he found this site but can't find out how to remove a virus even though he had part of the name.  I find that....unusual.
"Humans have a strength that cannot be measured. This is John Connor. If you are reading this, you are the resistance."

<<AutoCAD 2015>>

Back to Top

Related CAD tips:


 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down



This page was generated in 0,066 seconds.