Sage 100

v4.4 advanced no users can log in... attached error appears. I tried stopping and re-starting the host. Line 150 error 2

Did you try MAS 90 style, could be a corrupt service.

log in MAS90 style as administrator and DISABLE PEP. I've had to do this for several 4.5 and 2013 clients in the last 2 weeks.

At the PVX prompt, print the following: >?PGN (Current Program); >?PGM(-1) (primary program); >?TCB(5) (Line Number); ?E2$ (Key) This may help to determine which file is broken.

Print PGN and let me know the program name .... also agree with PEP comment.

check the size of the Activity log (SY_ActivityLog.m4t) I recall in older version that this could get too large and give a similar error. Replace it with an empty one if you think that might be the cause.

?pgn *tty; ?pgm(-1) *server; ?tcb(5) 150; ?e2$ returns nothing I tried running the host as a program.. same error. Run MAS 90 style and the program launched to the main menu but gibberish on the menu items. Going to try and disable pep now.

try opening MNUFILE.TXT (in the LAUNCHER directory) and see if it is encrypted or something. that is a text file and should be able to open it and read it. if it is encrypted they may have gotten the crypto virus

mnufile.txt is trashed (encrypted). Must be the virus. Thanks everyone! Looks like a long night.

we have found that the virus ignores .SOA and .M4T.....

Most crypto virus's that I've run into just encrypt text, and Microsoft files they don't know how to encrypt the Sage data files. so it may not be as horrible at least as far as Sage is concerned. restore the launcher and home directories. seems like maybe one I ran into encrypted PDF files so you may need to restore and paperless docs' I'

See my post from this morning. I have 2 clients that have been infected since Friday.

I had one last week. Looks like cryptolocker is back.

Just got our first. SY folder hit. Client on 2013 and reported PR check form was 4.4 and need to be converted.

False alarm. Turns out there are some SAP/Crystal files in SY and HOME that include ""crypto"" in the name. Neither IT or I did anything, but the forms are now 5.10 and work. It's a miracle!