View Full Version : 2009 CAD Virus?
fjtdogeno
2012-03-20, 02:26 PM
Hi Guys,
Does anyone encountered this problem? I have a Cad file which sent to me by my friend. When i open the file its automatically changed the default of my Cad setting. The pickbox has been drag to a maximum size, the aperture size has been drag to a maximum size as well and the cross hair has been rotated into 330 degrees. Every time i open my Cad the settings is always like this. Please see the attached screen shot. But before i open the file i scan it first with my Norton anti virus and its clean. Is anyone here can help?
Cheers
SoCal CAD Guru
2012-03-20, 04:59 PM
try typing these variables into your command line:
snapang = 0
pickbox = 3
aperture = 10
If that doesn't work, you could inspect the settings under Tools->Options, and select the "Display" tab.
fjtdogeno
2012-03-20, 05:24 PM
Yes i did this but if i close my Autocad program and then i open it again it will go back again on that settings shown on the image i attached previously.
cheers
SoCal CAD Guru
2012-03-20, 10:20 PM
Does it revert when opening an existing drawing, or creating a new one, or both?
fjtdogeno
2012-03-21, 12:23 AM
Yes its revert on both situation..
SoCal CAD Guru
2012-03-22, 08:19 PM
That it is reverting at the opening of AutoCAD is very strange. I believe those settings are attached to the CAD file, not your regestry or profile.
Was your new drawing template overwritten? Are you opening your files by launching AutoCAD first, then navigating to your .dwg? Or are you double-clicking on the .dwg file to open AutoCAD?
Can you upload the offending original file?
Sorry it took me a couple days to respond. Had some project deadlines...
Ed Jobe
2012-03-23, 03:26 PM
SNAPANG is saved in the dwg, but the other two are saved in the registry. If there is vba code in the file, it could run that code upon opening the dwg, or persisted itself by creating an acad.lsp file or modifying an existing one. If you post the file, we can check it.
fjtdogeno
2012-03-24, 06:39 AM
@RJ i will send you the whole folder of the drawing files and you can see there are a lot of other files included and i suspect one of this is the acaddoc.lsp is the culprit. Before you open the drawing files try to check first the folder contents i dont want you to be one of the victim as well. I will send it thru your email. Can i have your private email?
Thanks and regards
fjtdogeno
2012-03-26, 02:10 PM
Hi Ed here is the file.
cheers
Ed Jobe
2012-03-26, 03:00 PM
Looks like you forgot to upload the file.
fjtdogeno
2012-03-27, 05:13 PM
Hi Ed i dont know why zip file cannot be attached here. Can i have your personal email if you dont mind?
cheers
Ed Jobe
2012-03-27, 08:07 PM
You can certainly attach zip files. Perhaps you're trying to paste it into the post? Click on the Go Advanced button and click on the Manage Attachments button to upload it.
fjtdogeno
2012-03-28, 06:47 PM
I did this twice but doesn't work i don't know the reason why.
jaberwok
2012-03-28, 07:14 PM
How big is the file? 15Mb is the max allowed for a zip file.
fjtdogeno
2012-03-31, 01:37 AM
Hi John its just 2MB. I even try to turned off my firewall and norton but still unlucky to sent out.
Ed Jobe
2012-04-02, 01:11 AM
What file format is it? ...only certain file types are allowed. Is it dwg or zip? I checked and you have rights to post attachments to this forum.
fjtdogeno
2012-04-02, 02:30 PM
Hi Ed its a .zip file.
Liamnacuac
2012-04-02, 08:52 PM
Just to let you know, not that it relates to your issues, but we have a CAD Virus here that's fairly innocuous. It changes acad.mnl, and creates acad.lsp, boot.dat, and an acadapq file. We have our protection software set to delete most of these files, but it resides in the drawing files(?) and can replicate whenever the file is opened. ACAD HIV, managed with anti-virus software..
Ed Jobe
2012-04-03, 02:45 PM
Perhaps our server is rejecting the zip file for that same reason. fjt - What I would do is abandon that file and start from scratch or ask the sender to send you a "clean" file.
fjtdogeno
2012-04-04, 01:14 AM
Hi Ed, yes that's the best way i already delete the files, Thanks
@liamnacuac, i also noticed when the virus strike my AutoCAD, some variables settings has been changed.
Powered by vBulletin® Version 4.2.5 Copyright © 2025 vBulletin Solutions Inc. All rights reserved.