Adware/Malware has attached itself to ACAD

[Anonymous]

Looking for advise. Somehow I managed to allow some adware infect my computer. And it has attached itself to my ACAD. For example, if I hit F1, it sets off the adware. Then my anti-virus tells me a threat has been detected and has been stopped from running. And then I also get a text window telling me that my computer is infected and I need to call system support. Yeah, not falling for that one. This only happens when working in ACAD,

So, should I do a clean uninstall of ACAD, then re-install? I have resident anti-virus, that is working to keep the malware from going too far, but the adware popups are really annoying. I've already run (several times) Spybot and Malware Bytes.

[TheCADnoob]

if you type HELP into the command line does it come up?

[pendean]

Adware/Malware has not been removed if it still comes up: are you using "free" software or paid to scan and remove these? Paid work, 'free' often fails to stay alert enough to catch it before it plants itself into your system.

Do that first, otherwise you're just going to perpetuate the problem.

[stevetamplen · Accepted solution]

Hello leslye.irwin and welcome to the Forums!

The first thing that pops into my mind, is how did a virus/adware get past your anti-virus software in the first place? The second thing is, if it is working properly, the anti-virus solution should clean any affected files, removing the virus, and the virus/adware should no longer be affecting your program(s).

Often you will find that viruses will attack your anti-virus software first, then (the more virulent viruses) move on to block you from even opening an anti-virus website, so at that point, removing them is quite difficult.

Here is a good set of recommendations from one of the editors at download.com:

What to do if your computer has a virus

At this point, you should probably either choose a new A/V solution, make sure you old one is up to date on its virus definitions (usually happens automatically, but can be initiated on demand), or possibly download a newer version of the same software, and one that includes adware & spyware protection.

I have typically used free software for this purpose, making sure to choose a solution that has been well tested (millions of downloads, minimum of 4 stars), and make sure you download from a reputable site, like download.com (run by CNET), so you do not get a new virus!

Some anti-virus sites will scan your system for free, and this is often a good step to making sure that your A/V solution is getting the job done. Again, make sure it is a reputable site!

After you are certain that the virus/adware/spyware is gone, you should uninstall and reinstall AutoCAD.

Clean uninstall of AutoCAD or verticals

I hope that helps.

[Anonymous]

Yes

[TheCADnoob]

ITs possible that all they did was change the resource the help file is accessing. Goto OPTIONS and under the file tab expand the help section as seen in picture. Try copying each of these address and pasting them into a browser window. hopefully this will identify which resource location is the problem (assuming thats the problem)

How this happened is still a problem so if this helps identify the file you will still need to correct it and put things in place (like antivirus) to stop future hijack issues.

[Anonymous · Accepted solution]

Thanks everyone for your advise. I just wanted to update you all on my problem. 

I tried doing the clean uninstall instructions from Autodesk. But I was unable to remove the verticals and some of the files in the folders. (I suspect these were the adware.)  I reset back to the setpoint I created before I started the uninstall procedure. Then used the Uninstall Tool in my Autodesk Folder. After, I was able to remove the rest of the verticals and folders.

I have since re-installed and everything appears to be working fine. No more pop-ups!

[Anonymous]

Oh, and I also purchased and installed new anti-virus software prior to uninstalling/reinstalling.

[stevetamplen · Accepted solution]

Remember to run a Full Scan after the new A/V software updates its virus definitions.

The software will probably prompt you to restart then run the Full Scan after it updates.

Please post back to let us know when everything is resolved.

[Anonymous]

Steve,

I think everything is "okay" now regarding the adware infection. I've updated done a full scan. All clear.

However, I did get the following error when re-installing ACAD. I clicked through it and ACAD continued to install. Everything appears to be working, but I would like to make sure this is something that will not come back to haunt me:

Warning 1946. Property

'{9F4C2855-9F79-4B39-A8D0-E1D42DE1D5F3}, 12' for shortcut

'License Transfer Utility - AutoCAD 2016.lnk' could not be set.