virus acad.vlx

[PlannerRoad]

after the Trojan that uses autocad only as an infection vehicle, which I had reported qui, a virus has now emerged that causes the corruption of drawings.
virus is a file from the name acad.vlx, which is not a autodesk file.
the products affected by this virus are:

• autocad
• autocade architecture
• autocad civil
• autocad electrical
• autocad map 3d
• autocad mechanical
• autocade mep
• autocad p luminousid
• autocad raster design

the versions of these interested go from 2007 to 2010.acad.vlx in reality a variant of another 2005 virus that however had little diffusion.
not all antivirus at the moment detect it.
the autodesk has published the procedure to remove it that you can find here: acad.vlx virus cleanupread also qui.

 

[PlannerRoad]

on cadnauseam a .lsp file has been published which is an alternative to the procedure reported by autodesk to solve the problem of virus removal acad.vlx.
the article published is This is.
Enter the code of the lisp clear _ virus _ safe. Isp

;;; ==========================================================================
;;; file     : clean_virus_safe.lsp
;;; version  : 1.0
;;; date     : 14 august 2009
;;; author   : steve johnson after autodesk, based on suggestion by jimmy
;;;            bergmark.
;;; purpose  : checks for existence of acad.vlx and logo.gif files, which are
;;;            associated with virus al/logo-a, also known as acad/unexplode,
;;;            acad/agent.a or acm_unexplode.b. written as a safer alternative
;;;            to autodesk's code which deletes suspect files without
;;;            prior warning. this code renames the files instead.
;;; legal    : provided as-is with no warranty whatsoever, use at own risk.
;;;            may be distributed freely.
;;; usage    : append the contents of this file into a startup lisp file
;;;            (e.g. acaddoc.lsp in your search path - create such a file if
;;;            it does not exist). autodesk's suggestion to modify the
;;;            acad20xx.lsp file should not be followed: this is bad practice.
;;;            the acad20xx.lsp file is autodesk's file and any modifications
;;;            you make to it are likely to be lost when updates and patches
;;;            are applied.
;;; effects  : any and all files named acad.vlx and logo.gif and located in
;;;            autocad's search path will be renamed, e.g. "acad.vlx" will
;;;            become "[Suspected Virus] acad.vlx0". the name will end in a
;;;            number starting with 0. if other suspect files are later found
;;;            in the same location, those files will be renamed to end with
;;;            1, 2, 3 and so on.
;;; --------------------------------------------------------------------------
;;; structure:
;;;  clean_virus_safe.lsp
;;;  `--clean_virus_safe
;;;     `--make_new_name
;;; ==========================================================================


(defun clean_virus_safe (alertbox / make_new_name
                                    full-name path-only # new-name rename-msg)


  (defun make_new_name ()
    (strcat "[Suspected Virus] " virus-file (itoa #))
  ) ; end make_new_name


;; start clean_virus_safe ----------------------------

  (foreach virus-file '("acad.vlx" "logo.gif") 
    (while (setq full-name (findfile virus-file))
      (progn
        (setq
          path-only
           (substr full-name 1 (- (strlen full-name) (strlen virus-file)))
          # 0
        )
        (while (findfile (make_new_name))
          (setq # (1+ #))
        )
        (setq
          new-name (strcat path-only (make_new_name))
          rename-msg
          (if (vl-file-rename full-name new-name)
            (strcat
              "renamed suspected virus file:\n "
              full-name " to\n " new-name
            )
            (strcat
              "error: could not rename suspected virus file:\n "
              full-name " to\n " new-name
            )
          )
        )
        (princ (strcat "\n" rename-msg))
        (if alertbox (alert rename-msg))
      )
    )
  )
  (princ)
) ; end clean_virus_safe


;; call the (clean_virus_safe) function with or without alert box:

(clean_virus_safe nil) ; does not use alert box
; (clean_virus_safe t) ; uses alert box

;; one of the above lines should be commented out (i.e. start with a semi-colon).

(princ)