AutoCAD 2010/2011/2012 DWG Format

[#1]

Does anyone know why I'm getting "acad.lsp" files (approximately 27 to 28 KB) showing up in my drawing files folders?

I'm not sure but I thought this file was suppose to be in the

Program Files\Autodesk\*.*, folder?

I seem to be multple copies of this file.

As usual, any information or help would be appreciated.

Thanks

[#2]

ACAD.LSP virus has been around for a long time.

Search Autodesk site, there is a way to remove it.

[#3]

Thanks for the response... I probably should rephrase the question as

"How do you know the difference between the acad.lsp virus and a legitimate acad.lsp files?"

[#4]

The fake ones show up outside of Support Files Search Path that when you installed Autocad and they don't have acad+a number as shown in the 1st post.

[#5 · Accepted solution]

Hi Milt,

Current up-to-date antivirus programs should be able to find and remove all known AutoCAD viruses, unless there is a brand new one that hasn't been cataloged yet.

You should do a full scan of all files on all hard drives, which I think may not be how an antivirus program is setup by default, or it is a manual action that you need to take. You may also do a manual file search for acad.lsp and acaddoc.lsp files and delete them.

We have these articles on our web site about viruses:

http://usa.autodesk.com/getdoc/id=TS1103867

http://usa.autodesk.com/getdoc/id=TS19860569

http://usa.autodesk.com/getdoc/id=TS13717811

Some of these have links at the bottom to additional articles.

[#6]

To this date there has been "No Real Resolution". The only response that was close was from Bryce Thelin.

Also as I have discovered depending upon the version of AutoCAD, or the settings that you may have in regards to loading Autolisp. Early versions such as Acad2008, would ask you in the settings (systems tab, of the options dialog box), under General Option if you wanted to Load acad.lsp with every drawing. And of course the main ACAD.LSP  file remained in the folder (C:\Program Files\AutoCAD\Support). Now with the newer versions of AutoCAD,  it seems as if you don't have the right settings, or if some "glitch" occurs you are unable to tell if the acad.lsp file is a virus, or actually required as a setting for the drawing file that you may be working on.

[#7]

I have had this virus pop-up on our systems a few times and I would add this to Bryce's advice:-
1. The virus is self-editing so inserts blank lines to fool virus scanners. Very rarely did our corporate scanner find it;
2. I have replaced the ACAD.LSP and ACADDOC.LSP with a blank file and made it read-only and a hidden file so the virus cannot change it (unless you get a variant that can!!)

We have been virus free for a few months now since our last clean up so hopefully this has worked