Author Topic: !Attention! - Virus in 3ds Max Stocks models!! Read article!!!  (Read 39238 times)


2018-03-26, 13:56:31
Reply #1

Rimas

  • Active Users
  • **
  • Posts: 156
  • Please refer all complaints to a brick wall nearby
    • View Profile
Huh. I'm clean on my machine, yet I do use a lot of downloaded models. Fingers crossed I never comes across this.
A morning of awkwardness is far better than a night of loneliness...

2018-03-27, 05:57:31
Reply #2

Christa Noel

  • Active Users
  • **
  • Posts: 911
  • God bless us everyone
    • View Profile
    • dionch.studio
people create a mxs virus for 3ds max?? Is that for real??
Bad code in mxs is possible to corrupt a scene but deliberately do that.. what are the benefits?
no body use mxs to steal something even with custom attribute
« Last Edit: 2018-03-27, 08:05:23 by Christa Noel »

2018-03-27, 11:00:33
Reply #3

romullus

  • Global Moderator
  • Active Users
  • ****
  • Posts: 8779
  • Let's move this topic, shall we?
    • View Profile
    • My Models
Even if it has no real purpose and was created just for fun, the damage it may do to your scenes is very real and it will spread like wildfire if not treated. My max is clean, but i use many free assets from the internet, so i'm quite concerned about that.
I'm not Corona Team member. Everything i say, is my personal opinion only.
My Models | My Videos | My Pictures

2018-03-27, 15:36:17
Reply #4

apjasko

  • Active Users
  • **
  • Posts: 92
    • View Profile
I wonder if something like this was created to spoil pirates from torrenting models from sources like cgpeers.

So am I understanding this correctly - if I download Prune Scene and run it once, it will run at startup from then on, or does it need to be ran every time I open Max?

2018-03-27, 18:51:14
Reply #5

Frood

  • Active Users
  • **
  • Posts: 1903
    • View Profile
    • Rakete GmbH
and run it once, it will run at startup from then on, or does it need to be ran every time I open Max?

Sounds so. I think it just installs a startup script which hooks into #filePostOpen event and checks those global variables. I've created a script testing those vars:

#("AutodeskLicSerStuckCleanBeta","CRP_AScript","CRP_BScript","CRP_WriteAScript","CRP_WriteBScript")

are there any more?

script goes to "scripts\startup" directory, everytime a scene is loaded those vars are tested and you get allerted if one of them is found.


Good Luck


Edit: Removed script, useless meanwhile.

« Last Edit: 2019-05-02, 19:35:35 by Frood »
Never underestimate the power of a well placed level one spell.

2018-03-27, 19:15:12
Reply #6

Misha

  • Active Users
  • **
  • Posts: 51
    • View Profile
"So am I understanding this correctly - if I download Prune Scene and run it once, it will run at startup from then on, or does it need to be ran every time I open Max?"
If you run it once the prune scene will run automatic on max start

2018-04-01, 17:57:57
Reply #7

MastaMan

  • Active Users
  • **
  • Posts: 22
  • http://3dground.net
    • View Profile
    • 3D GROUND
Hey guys, Prune Scene updated!
http://3dground.net/prod/prune-scene-2180817

Change Log 2.6.6:

+ Added: New signature worm.3dsmax.crp.bscript
+ Added: Startup scripts protection from injection
+ Added: Repair infected files
* Changed: Start Active Protection without UAC (Admin rights)
* Changed: Improved all signatures for detect modifications

2018-04-08, 23:59:11
Reply #8

lupaz

  • Active Users
  • **
  • Posts: 951
    • View Profile
This is the first time I hear about this.
Is anyone installing the Prune Scene script?
I was trying to find more info about it by googling but it doesn't seem to be a popular topic...So weird.
I have the feeling that I'll get something by installing that script.


2018-04-09, 10:06:39
Reply #9

romullus

  • Global Moderator
  • Active Users
  • ****
  • Posts: 8779
  • Let's move this topic, shall we?
    • View Profile
    • My Models

2018-04-09, 14:53:02
Reply #10

lupaz

  • Active Users
  • **
  • Posts: 951
    • View Profile

2018-04-13, 11:50:14
Reply #11

MastaMan

  • Active Users
  • **
  • Posts: 22
  • http://3dground.net
    • View Profile
    • 3D GROUND
This is the first time I hear about this.
Is anyone installing the Prune Scene script?
I was trying to find more info about it by googling but it doesn't seem to be a popular topic...So weird.
I have the feeling that I'll get something by installing that script.

These viruses have existed for a long time, but only recently they came from Chinese stocks.
Now many models infected in 3dsky stock. And many people catch this viruses.

Prune Scene installed by many people and have many positive comments.
You can use the cleaners from Autodesk, just read this article http://3dground.net/article/attention-alc-and-crp-viruses-in-3ds-max-
You can find all info about this viruses and how to clean.

2018-04-30, 13:25:56
Reply #12

JakubCech

  • Active Users
  • **
  • Posts: 126
  • jakubcech.net
    • View Profile
    • jakubcech
Hey - the Prune Scene is not working for me - I have ALC virus (helpers) in the scene called "¡¡×ý×û" and "×þ×ü".
Anyway - Prune Scene does not remove those - however ALC_fixup_v1_2.ms does - can you update Prune Scene script?

Jakub
« Last Edit: 2018-04-30, 14:39:03 by JakubCech »

2018-04-30, 14:19:21
Reply #13

Thanhluong

  • Active Users
  • **
  • Posts: 39
    • View Profile
    • natrangdesign.com
Hallo all,

This is how I delete it. Hope it is useful.


2018-04-30, 18:21:16
Reply #14

Frood

  • Active Users
  • **
  • Posts: 1903
    • View Profile
    • Rakete GmbH
Anyone has some "infected" scene for me? I would like to investigate. It looks to me as if it would be enough to go to customize->preferences->MAXscript and temporarily disable all startup options ("Load Startup Scripts", "Load/Save Scene Scripts", "Load/Save Persistent Globals") before loading such a scene, but I'd like to test.


Good Luck


Never underestimate the power of a well placed level one spell.