Strange filepro event

[Jose Lerebours]

Well, it is possible that the file came up on one of those "dark web 
security scans or is it scams" ... ;-)


On 02/27/2018 11:49 AM, Nancy Palmquist via Filepro-list wrote:
> Jose,
> We know filepro did not do it but since it affected my filePro 
> customer I took some liberty and suggested it might affect other 
> filepro customers.  It is not like Credit is not an unlikely prefix 
> for a filepro output or process table.
>
> But it was a bit weird and gave me a chuckle.
>
> Nancy
> On 2/27/2018 11:33 AM, Jose Lerebours via Filepro-list wrote:
>> not sure how this is an "strange filePro event" since it is more of a 
>> "intrusive antivirus program" ... Perhaps, this program has a "white 
>> list" where anything in ~filepro ~fp is given a pass?
>>
>> lol, I am sure I am gonna get it for even thinking that a white list 
>> may exist as the list itself could be compromised and hide viruses 
>> ... what a vicious cycle.
>>
>>
>>
>> On 02/27/2018 11:25 AM, Nancy Palmquist via Filepro-list wrote:
>>> Fellow filepro Users,
>>>
>>> I just had a customer call that is using a Windows Server for 
>>> filepro.  They reported that an error indicated a file was not found 
>>> which turned out to be a file called "CREDITFM.prc".
>>>
>>> We looked further and the "CREDITFM.OUT" was also missing as was 
>>> another form and process called "CREDIT2.prc" and "CREDIT2.out"
>>>
>>> We searched further and it seems every filepro process and output 
>>> that started with the letters "CREDIT" were removed. They had such 
>>> files in two different filepro databases.
>>>
>>> My guess is that these files were somehow tagged as possible virus 
>>> files and maybe removed automatically or a user somewhere was 
>>> queried about removal and agreed.  It is unlikely that a user 
>>> searched out these files and deleted them for sport.
>>>
>>> I am usually not surprised by this when I see filepro files 
>>> disappear.  I had zero length files deleted - usually DATA files 
>>> which you don't notice until you try to change the map or expand the 
>>> file.
>>>
>>> But if you have a customer on a windows server and files of this 
>>> type disappear maybe this will save you some time checking it out.
>>>
>>> I do not have the name of the virus scanner they use.  The user was 
>>> not familiar with that part of the system.
>>>
>>> Nancy
>>>
>>>
>>
>

-- 
Jose D. Lerebours
954-559-7186
https://www.cargosaas.com
http://www.ezbookeep.com
http://www.ezdaemon.com
http://www.fp2php.com