Sage 100

Customer can open Sage 100 Standard 4.50.3 and the information center panel appears on the right but if you click on Modules under Tasks on the left, no modules display. Clicking the File menu does nothing (so no run option). I know I had this happen once in Crystal where it showed no modules once logged on but it was about 15 years ago or so. Can't recall if we restored a file or reinstalled LM and system setup at the time. Thoughts??

I had this happen and the customer was infected with the CryptoLocker virus. It encrypted the menu txt files. I had to restore all txt files, as well as PDF's and images folder

Is this the issue? Missing Modules: Restore ..\..\MAS90\LAUNCHER\MNUMOD.TXT file from a backup

@DianaLaughner is that the decrypt virus??

This is what I see in the Home directory:

Yes, if you look in the Launcher folder - you can see that it puts a file there called Cryptolocker and it encrypts all txt files. If that's what your issue is.

That's it.

Virus - http://www.pcrisk.com/removal-guides/7844-cryptowall-virus

Ugh!!!

I was able to get this resolved by renaming the existing txt files and restoring from a backup. It did not impact any actual MAS data files.

My client just got it also and @DianaLaughner told me what to do. I told the IT guy what needed to be restored (all TXT file in MAS folder) but it looks like the virus got the whole server . I found the even in the MAS_XXX folder They were not able to open TXT,PDF,Doc and Excel files. Not pretty.

She just said, ""Why would it only get the MAS90 folder?"" Um, probably didn't.....

They're in for a surprise.

Next question - do you have a backup?

She says they do every night. We'll see. She is calling their internal IT guy back from lunch....

Yep, PDF's are not able to be opened either.

http://youtu.be/wCfWHqrYUqo

Yeah and the back up is from last night. When did this happen? My customer had it happen in middle of day.

You would think who ever wrote this virus would do something worth wile like fix the portal for us .

It looks like today at about 9 am or so CT.

Any idea how they got it? I have a customer that will not allow internet on their MAS server for fear of issues like this. It makes upgrades a PIA having to get with their IT and have them enable it just to download updates, but so far it has worked for them.

No idea.

I think it is from a email that someone opened.

Their IT guy wanted to know how to prevent it from happening again. Wish I had an easy answer for that one.

I see that now...I was thinking Facebook.

It seems to write those DECRYPT files to the parent directory and all subsequent directories affected so if you open a sub-directory and they are NOT there, it seems the files are fine. They have at least six other directories besides the MAS90 one affected. Word, Excel and PDF files were unreadable in those directories but not in the others. He is hoping the backup was good last night. The customer said no one has done anything today since they couldn't get in so that's a good thing! All the DECRYPT files said 9:00 or later this morning. We had another customer who had this a few weeks ago. Happened in the middle of the day and they were scrambling to determine what needed to be re-entered. Quite the mess.

Don't open emails that look funky or have an attachment and the senders email address looks right.

I think we should just go back to ledgers and pencils...

Have 2 customers now using virtual servers, 1 for user accts and email and 1 for MAS. If it was email related, maybe that is an option. So far, they have not had any issues that I know of and I'm sure I would have heard about it by now. They have been on this type of system for years.

What a pain!!!

Client (CPA firm) just called with this decrypt virus today. Sigh....

Is this virus the same one that would lock files and ask for a ransom or is it a new strain altogether?

We see all through our IT clients. Seems to get through most AVs as well. We have started blocking all .zip attachments across the board. That is a pain!

One of my clients was infected by an email that said it was a fax. When she tried to click on it, it wouldn't open, so she sent it to 3 other people in the office so they could try it! And they all did try it...

Omg @DianaLaughner what a mess that must be now

Just got the call from a client.......... Looks like a long night for their IT department........