ACAD/Medre.A malware emails your drawings to the bad guys
Jimmy Bergmark has reported a particularly unpleasant piece of malware, so please check it out. The Autodesk Knowledge Base item can be found here.
Tag: Malware
AutoCAD virus protection update
As I mentioned in my last post, I had some reservations about the code provided by Autodesk to deal with suspect acad.vlx and logo.gif files. Based on a suggestion from Jimmy Bergmark, I have written my own, safer version which you can download here: clean_virus_safe.lsp. The comments at the top of the clean_virus_safe.lsp file explain what to do with it, but I will reproduce some of the relevant points here. Purpose: Checks for existence of acad.vlx and logo.gif files, which are associated with virus AL/Logo-A, also known as ACAD/Unexplode, ACAD/Agent.A or ACM_UNEXPLODE.B. Written as a safer alternative to Autodesk’s code …
Another AutoCAD malware warning
Shaan Hurley has posted some useful information about another AutoCAD-based virus that is doing the rounds, and I strongly suggest you read it. However, I have some reservations about the solution that is posted there and in the Autodesk knowledgebase. The LISP code suggested will delete any files called acad.vlx or logo.gif that are located in the current user’s current AutoCAD search path. There are a couple of problems with that. The search path will change depending on the user, the profile, the startup folder and the drawing folder. That means you can’t just use the code once and expect …
AutoCAD malware warning
There is a piece of malware out there written as an ObjectARX application, i.e. it will only affect AutoCAD users. It’s a China-based adware client, which Andrew Brandt at the Webroot threat blog has named Trojan-Pigrig. For full details, see here. Also, see here for AutoCAD-specific advice from the AutoCAD support team at the Without a Net blog.