CAD Forum discussion (EN) : Cambodia virus https://www.cadforum.cz/forum_en/ Tue, 09 Jun 2026 12:03:39 +0000 Thu, 17 May 2012 00:10:33 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 12.04 360 https://www.cadforum.cz/forum_en/RSS_post_feed.asp?TID=7809 <![CDATA[CAD Forum discussion (EN)]]> https://www.cadforum.cz/forum_en/forum_images/web_wiz_forums.png https://www.cadforum.cz/forum_en/ <![CDATA[Cambodia virus : Somehow he found this site but...]]> https://www.cadforum.cz/forum_en/forum_posts.asp?TID=7809&PID=20185&title=cambodia-virus#20185 Author: John Connor
Subject: 7809
Posted: 17.May.2012 at 00:10

Somehow he found this site but can't find out how to remove a virus even though he had part of the name.  I find that....unusual.]]> Thu, 17 May 2012 00:10:33 +0000 https://www.cadforum.cz/forum_en/forum_posts.asp?TID=7809&PID=20185&title=cambodia-virus#20185 <![CDATA[Cambodia virus : Crack that whip, John! Dave...]]> https://www.cadforum.cz/forum_en/forum_posts.asp?TID=7809&PID=20183&title=cambodia-virus#20183 Author: heinsite
Subject: 7809
Posted: 16.May.2012 at 21:11

Crack that whip, John!
Clap
Dave
]]> Wed, 16 May 2012 21:11:46 +0000 https://www.cadforum.cz/forum_en/forum_posts.asp?TID=7809&PID=20183&title=cambodia-virus#20183 <![CDATA[Cambodia virus : Your antivirus program should...]]> https://www.cadforum.cz/forum_en/forum_posts.asp?TID=7809&PID=20175&title=cambodia-virus#20175 Author: John Connor
Subject: 7809
Posted: 16.May.2012 at 12:12

Your antivirus program should have found and deleted the virus.  Haven't you kept your av program up-to-date with the latest virus definition files?  Here are removal instructions posted by Symantec.

http://www.symantec.com/security_response/writeup.jsp?docid=2005-111717-2608-99&tabid=3

I'll bet that if you look hard enough you may even find a removal tool, for free, has been posted by one of the makers of a major antivirus program such as AVG.

Now, stop with the panic mode and get to work cleaning your system up.  And in the future be more careful where you download AutoCAD related content from.  Upgrade your anti-virus program too!

You owe me.  Free virus removal tool at Sophos....

http://www.sophos.com/en-us/threat-center/threat-analyses/viruses-and-spyware/AL~Bursted-B.aspx


Edited by John Connor - 16.May.2012 at 12:27]]> Wed, 16 May 2012 12:12:11 +0000 https://www.cadforum.cz/forum_en/forum_posts.asp?TID=7809&PID=20175&title=cambodia-virus#20175 <![CDATA[Cambodia virus : As posted at the AutoCAD 2007...]]> https://www.cadforum.cz/forum_en/forum_posts.asp?TID=7809&PID=20174&title=cambodia-virus#20174 Author: John Connor
Subject: 7809
Posted: 16.May.2012 at 12:06

As posted at the AutoCAD 2007 Discussion Groups:

According to this post on the Symantec website, ALS Bursted creates copies of the acad.lsp file:

"ALS.Bursted.A is a virus that is written in the AutoCAD AutoLisp scripting
language. The virus will be received as a text file named acad.lsp in the
same directory as an AutoCAD drawing file (.dwg). When the drawing file is
opened, the acad.lsp file is automatically loaded by AutoCAD which causes
the virus to be executed.

The virus first locates and reads the file base.dcl in the AutoCAD search
path. It uses this file to locate the acad.lsp file in the AutoCAD Support
directory. The virus then reads the acad.lsp file to check for the presence
of the string "acadapp". If the string is not found, the virus copies itself
over as acadapp.lsp. Due to a bug in the virus, the check always fails.

Next, the virus checks if the name of the drawing file is Drawing.dwg (this
is the default name for a new drawing file). If this check fails, the virus
copies itself to the folder as acad.lsp."]]> Wed, 16 May 2012 12:06:15 +0000 https://www.cadforum.cz/forum_en/forum_posts.asp?TID=7809&PID=20174&title=cambodia-virus#20174 <![CDATA[Cambodia virus : Cambodia virus? AutoCAD?Never...]]> https://www.cadforum.cz/forum_en/forum_posts.asp?TID=7809&PID=20172&title=cambodia-virus#20172 Author: John Connor
Subject: 7809
Posted: 16.May.2012 at 11:48

Cambodia virus?  AutoCAD?

Never heard of it. 

Could we get more information?  What does this virus do?  How is it delivered?

Never mind.

You're talking about the ALS.Bursted.B virus.  Hasn't this been mentioned in a white paper at the AutoDesk website?


Edited by John Connor - 16.May.2012 at 12:02]]> Wed, 16 May 2012 11:48:04 +0000 https://www.cadforum.cz/forum_en/forum_posts.asp?TID=7809&PID=20172&title=cambodia-virus#20172 <![CDATA[Cambodia virus : Hi.. Someone please help me.How...]]> https://www.cadforum.cz/forum_en/forum_posts.asp?TID=7809&PID=20170&title=cambodia-virus#20170 Author: mohd fahmi
Subject: 7809
Posted: 16.May.2012 at 05:38

Hi..

Someone please help me.How to remove cambodia virus on autocad..please help me

Tq

Edited by mohd fahmi - 16.May.2012 at 07:16]]> Wed, 16 May 2012 05:38:10 +0000 https://www.cadforum.cz/forum_en/forum_posts.asp?TID=7809&PID=20170&title=cambodia-virus#20170