Virus:ALisp/Passdoc.A is an AutoLISP script virus that targets installations of Autocad software.
It arrives on a user's computer with the name "acaddoc.lsp", usually along with infected Autocad projects. It is automatically executed when an Autocad drawing file is opened.
When run it performs the following actions:
copies itself to all .mnl files in the folder containing the "acad.mnl" file
copies itself to all .lsp files in the subfolder "support" whose parent folder contains the "acad.exe" file
Analysis by Marian Radu
The following system changes may indicate the presence of this malware: