the security tool is out of date and didn’t work.
I just ran this and it culled the nodes:
import maya.cmds as cmds
unknownNodes=cmds.ls(type = "unknown")
unknownNodes+=cmds.ls(type = "unknownDag")
unknownNodes+=cmds.ls(type = "script")for item in unknownNodes:
if cmds.objExists(item):
print item
cmds.lockNode(item, lock=False)
cmds.delete(item)
On Thursday, September 24, 2020 at 5:57:01 AM UTC-7 vince touache wrote:
> as a temporary solution, I guess you can still uncheck the "execute script
> jobs" when you open an untrustworthy file
>
> Le mercredi 23 septembre 2020 à 19:20:12 UTC-4, justin...@gmail.com a
> écrit :
>
>> On Thu, Sep 24, 2020 at 10:58 AM Geordie Martinez <geordie...@gmail.com>
>> wrote:
>>
>>> Whew! But also, holy crap. Maya files could easily turn into attack
>>> vectors.
>>> This bit of code was repeated in the file about 940+ times.
>>>
>>
>> Probably why this exists now:
>>
>> https://knowledge.autodesk.com/support/maya/troubleshooting/caas/simplecontent/content/maya-security-tool-faq.html
>>
>>
>>>
>>>
>>> On Wednesday, September 23, 2020 at 3:45:21 PM UTC-7 justin...@gmail.com
>>> wrote:
>>>
>>>> On Thu, Sep 24, 2020 at 10:38 AM Geordie Martinez <geordie...@gmail.com>
>>>> wrote:
>>>>
>>>>> Looks like there is something on TechArtists.
>>>>>
>>>>>
>>>>> http://discourse.techart.online/t/another-maya-malware-in-the-wild/12970
>>>>
>>>>
>>>> You beat me to posting that link. Seems like the actual code itself is
>>>> not malicious, as it was intended by some other company to try and detect
>>>> actual virus behaviour. But the whole idea of script jobs running at file
>>>> import is super dangerous. You would really need to trust the source of
>>>> your scene files or rely on the file security scanning to detect threads.
>>>>
>>>>
>>>>>
>>>>>
>>>>> On Wednesday, September 23, 2020 at 3:34:30 PM UTC-7 Geordie Martinez
>>>>> wrote:
>>>>>
>>>>>> Chad Vernon, why do you teach people to do these things? :)
>>>>>>
>>>>>>
>>>>>> On Wednesday, September 23, 2020 at 3:32:39 PM UTC-7 Geordie Martinez
>>>>>> wrote:
>>>>>>
>>>>>>> Hey all,
>>>>>>>
>>>>>>> I have been haxored.
>>>>>>>
>>>>>>> I recently opened a file from our studio in china and this malicious
>>>>>>> code (screencap only attached) was in there. it modified my
>>>>>>> userSetup.py so
>>>>>>> when I launched the next maya session it ran all this code. I have no
>>>>>>> idea
>>>>>>> what this is.
>>>>>>>
>>>>>>> Has anyone seen this crap before?
>>>>>>>
>>>>>>>
>>>>>>> --
>>>>> You received this message because you are subscribed to the Google
>>>>> Groups "Python Programming for Autodesk Maya" group.
>>>>> To unsubscribe from this group and stop receiving emails from it, send
>>>>> an email to python_inside_m...@googlegroups.com.
>>>>> To view this discussion on the web visit
>>>>> https://groups.google.com/d/msgid/python_inside_maya/774e865f-88d1-4b16-8690-0c7bd8ce380en%40googlegroups.com
>>>>>
>>>>> <https://groups.google.com/d/msgid/python_inside_maya/774e865f-88d1-4b16-8690-0c7bd8ce380en%40googlegroups.com?utm_medium=email&utm_source=footer>
>>>>> .
>>>>>
>>>> --
>>> You received this message because you are subscribed to the Google
>>> Groups "Python Programming for Autodesk Maya" group.
>>> To unsubscribe from this group and stop receiving emails from it, send
>>> an email to python_inside_m...@googlegroups.com.
>>>
>> To view this discussion on the web visit
>>> https://groups.google.com/d/msgid/python_inside_maya/f2542116-c986-4465-9fcf-831a67d1f3d3n%40googlegroups.com
>>>
>>> <https://groups.google.com/d/msgid/python_inside_maya/f2542116-c986-4465-9fcf-831a67d1f3d3n%40googlegroups.com?utm_medium=email&utm_source=footer>
>>> .
>>>
>>
--
You received this message because you are subscribed to the Google Groups
"Python Programming for Autodesk Maya" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to python_inside_maya+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/python_inside_maya/8e25c43e-ada9-4331-8097-abd969b047c8n%40googlegroups.com.
