Comments on: What is loaded at AutoCAD startup, and when? http://www.blog.cadnauseam.com/2008/09/01/what-is-loaded-at-autocad-startup-and-when/ A strange mix of AutoCAD, music, image manipulation and video Wed, 07 Jan 2009 07:05:59 +0000 http://wordpress.org/?v=2.7 hourly 1 By: Chris4d http://www.blog.cadnauseam.com/2008/09/01/what-is-loaded-at-autocad-startup-and-when/comment-page-1/#comment-3215 Chris4d Tue, 06 Jan 2009 23:17:13 +0000 http://www.blog.cadnauseam.com/?p=157#comment-3215 Very informative, thanks... so on top of all this, when do script files specified at the command line load? At the very end? Or no? Very informative, thanks… so on top of all this, when do script files specified at the command line load? At the very end? Or no?

]]> By: Mark McDonough http://www.blog.cadnauseam.com/2008/09/01/what-is-loaded-at-autocad-startup-and-when/comment-page-1/#comment-1318 Mark McDonough Tue, 02 Sep 2008 21:18:44 +0000 http://www.blog.cadnauseam.com/?p=157#comment-1318 Thanks for putting this together. Autodesk does also publish a list of the AutoCAD startup sequence. This all came to be rather important with the recent rash of "CAD viruses", aka ALS_BURSTED.H virus or variously called Virus.ALS.Bursted, ALS/Bursted, and other variants. The virus comes as a tainted ACAD.FAS file, or an ACAD.VLX file, and on some sites discussing the "CAD virus" conjectured that ACAD.FAS and ACAD.VLX probably load up at the same sequence position as ACAD.LSP. One of our offices got infected with the virus, and the solution was to put some code in ACAD200X.LSP (which loads BEFORE acad.lsp/fas/vlx) to thwart the virus. The virus takes advantage of the automatic-loading of reserved AutoCAD file names to execute their infected version of said files. Frankly, I'm surprised there haven't been more of these types of virus attacks, not dissimilar to MS Office macro viruses that exploit templates and other files that get auto-loaded when Office applications launch. Thanks for putting this together. Autodesk does also publish a list of the AutoCAD startup sequence. This all came to be rather important with the recent rash of “CAD viruses”, aka ALS_BURSTED.H virus or variously called Virus.ALS.Bursted, ALS/Bursted, and other variants. The virus comes as a tainted ACAD.FAS file, or an ACAD.VLX file, and on some sites discussing the “CAD virus” conjectured that ACAD.FAS and ACAD.VLX probably load up at the same sequence position as ACAD.LSP. One of our offices got infected with the virus, and the solution was to put some code in ACAD200X.LSP (which loads BEFORE acad.lsp/fas/vlx) to thwart the virus. The virus takes advantage of the automatic-loading of reserved AutoCAD file names to execute their infected version of said files. Frankly, I’m surprised there haven’t been more of these types of virus attacks, not dissimilar to MS Office macro viruses that exploit templates and other files that get auto-loaded when Office applications launch.

]]> By: Todd Shackelford http://www.blog.cadnauseam.com/2008/09/01/what-is-loaded-at-autocad-startup-and-when/comment-page-1/#comment-1305 Todd Shackelford Tue, 02 Sep 2008 19:22:09 +0000 http://www.blog.cadnauseam.com/?p=157#comment-1305 This is a great reference post. I'm going to print it and put it in a notebook. I'm also going to make a copy and tape it on the wall near my monitor. I'll also book mark this site incase of a fire. That reminds me, I should write something about backing up information. I'm sure I have a few versions started somewhere around here. This is a great reference post.

I’m going to print it and put it in a notebook. I’m also going to make a copy and tape it on the wall near my monitor. I’ll also book mark this site incase of a fire. That reminds me, I should write something about backing up information. I’m sure I have a few versions started somewhere around here.

]]> By: Jimmy Bergmark - JTB World http://www.blog.cadnauseam.com/2008/09/01/what-is-loaded-at-autocad-startup-and-when/comment-page-1/#comment-1193 Jimmy Bergmark - JTB World Mon, 01 Sep 2008 12:32:38 +0000 http://www.blog.cadnauseam.com/?p=157#comment-1193 Great post! It would be useful to also include when ARXs and DLLs are loaded from HKEY_CURRENT_USER\Software\Autodesk\AutoCAD\R17.2\ACAD-7001:409\Applications and HKEY_LOCAL_MACHINE\SOFTWARE\Autodesk\AutoCAD\R17.2\ACAD-7001:409\Applications. Great post! It would be useful to also include when ARXs and DLLs are loaded from HKEY_CURRENT_USER\Software\Autodesk\AutoCAD\R17.2\ACAD-7001:409\Applications and HKEY_LOCAL_MACHINE\SOFTWARE\Autodesk\AutoCAD\R17.2\ACAD-7001:409\Applications.

]]>