Common Methods for clearing AutoCAD viruses (Acad. FAS, Acad. LSP)

Common Methods for clearing AutoCAD viruses (Acad. FAS, Acad. LSP)

Acad. FAS and ACAD. LSP are the most common CAD viruses. Because it is not harmful to the system itself, but it is not a prank program, so most anti-virus software does not work for them, the following describes the manual deletion method.

Step 1: Search for the hard disk and the Acad in the USB flash drive. FAS, LCM. FAS, Acad. LSP, acadapp. LSP, acadappp. five LSP files are deleted and cleaned (hide the files and open the system files before searching. These five files may not appear at the same time. We strongly recommend that you use the total Commander file manager ).

Step 2: Search for Acad. mnl file (this file usually has two, one in the "C:/program files/AutoCAD *****/userdatacache/support/" directory, and the other in "C: /Documents and Settings/your username/Application Data/Autodesk/AutoCAD *****/R *****/CHS/support/"directory. Currently, the virus only changes the first Acad. mnl file ).

Open the Acad. mnl file, find the combination of the following three statements at the end of the file and delete them (these three statements may not appear at the same time), and save the file.

(If (null STOL) (Load "LCM """))

(Princ)

 

(Load "acadapp. LSP ")

(Princ)

 

(Load "acadappp. LSP ")

(Princ)

 

Appendix:

Description of the CAD virus Acad. FAS:

1. It is harmless to computers!

2. It has no effect on CAD during the period from!

Its side effects are:

A dialog box showing the time will pop up when your CAD is started.

It is assumed that the time is not between and, and may change with the "move" command.

The temporary solution during this period is:

Adjust the computer system time!

(If necessary, turn off the CAD before opening the CAD)

If you do not want to search for folders, you can enter the following characters to the CAD command line:

(While (or (setq A (findfile "Acad. FAS") (setq A (findfile "LCM. FAS") (VL-file-delete ))

Suppose there is a notepad phenomenon during text editing. Please input the following line of red letters to the command line? :

(Setvar "mtexted "".")