>A customer just called and reported a problem with my VFP 9 application. When I connected to the server, I see that all .DBF table names were changed to .dbf.abc. (e.g. App_Pref.dbf became App_Pref.dbf.abc) Not only the name has changed but the file itself too. When I renamed a file from .abc back to .dbf, I cannot open it with VFP. VFP say that the file is not a DBF type
>
>I have tried to Google but can't find anything. Anybody knows of a virus or what could have changed the files?

I agree with Marcia and Al, I just wanted to add that Ransomware usually places an HTML or Text file with the instructions on how to pay said ransom, so look at the folders and if you see html or txt files that should not belong (I think they are named after the folders or the files so in your case there is probably a app_pref.html). Not saying that you need to pay, just look for this files and if you found them then it absolutely is ransomware.