>>A customer just called and reported a problem with my VFP 9 application. When I connected to the server, I see that all .DBF table names were changed to .dbf.abc. (e.g. App_Pref.dbf became App_Pref.dbf.abc) Not only the name has changed but the file itself too. When I renamed a file from .abc back to .dbf, I cannot open it with VFP. VFP say that the file is not a DBF type
>>
>>I have tried to Google but can't find anything. Anybody knows of a virus or what could have changed the files?
>
>https://en.wikipedia.org/wiki/CryptoLocker
>
>They'll want you money (in Turkey they want about 2.500-USD, I think they want more for a USA customer). Our government was unlock these files for free before last version developed. You have to pay money or restore from backups. They USUALLY restore your files after payment, but USUALLY!!! A lot of customers of my personal application catched by that virus and my personel customers usually don't care backups or backup their files in another computer at some network. :(
>
>They really work interesting. They usually send local turkish cable phone providers fake invoices by mail, theirs fake invoices prepared special for everyone. They're really good working...

Thank you. So far all I hear from customers is that the application does not work. But they have not let me know if a ransom had been requested. And I doubt they (the thieves) will get any money (this organization is a large hospital network). But hopefully they have a backup. My concern is also that my application is using SQL Server database and that SQL database gets infected by this virus too.