Archive for October, 2009

Missing Language Pack – ACAD.VLX Virus?

Friday, October 9th, 2009

In an office full of US English seats of Civil 3D, our users frequently see a dialog which reports a missing language pack when opening DWG files.  I can only assume that at one time a drawing file did contain an object which was worked on in a non-english version of AutoCAD or Civil 3D.  Since we’re seeting this more frequently, I’m a little concerned this might turn out to be yet another piece of contagious “CAD Debris” (such as Named Layer Filters [2000-2002], Scale Lists [2008], and unused RegApps [ongoing]).   According to Matt’s post in this thread, which details Autodesk’s explanation of this issue, it sounds like it’s fairly benign and the user can feel comfortable by checking the “don’t show me this again” checkbox (or, alternately, actually installing the Windows language pack).

However, it has recently come to my attention there there is also an AutoCAD specific virus being distributed in a file called ACAD.VLX which also causes the Missing Language Pack dialog.  Autodesk recently posted an article about the virus.  After following the steps outlined in the article, I determined that we do not have the infected acad.vlx file so my Missing Language Pack dialog is likely caused by an actual object in the drawing file(s).

What bothers me about Autodesk’s article about the ACAD.VLX virus is that there isn’t much information and I still have plenty of questions:

  • What is the method of infection and how is the evil ACAD.VLX being distributed?
  • Other than the “Missing Language Pack” dialog, is there any additional payload?
  • What can users do to prevent infection?
  • Do over the counter virus scanners catch this virus?