Dear all,

found a very weird and critical issue this morning.
We are still investigating, but I'm posting this up front incase this is a known issue (hoping I could get direction as soon as possible).

This morning two of my clients had a situation where all DBISAM tables in the database were renamed to
error_tablename.dat (idx and blb).

Is this at all dbisam related?
We are now investigating virus related causes and programmatic causes.

Kind Regards
Danie

Danie

>found a very weird and critical issue this morning.
>We are still investigating, but I'm posting this up front incase this is a known issue (hoping I could get direction as soon as possible).
>
>This morning two of my clients had a situation where all DBISAM tables in the database were renamed to
>error_tablename.dat (idx and blb).

Whilst its no guarantee of it not being known I don't recall it ever being mentioned in these newsgroups before.

Roy Lambert

Danie van Eeden wrote:

> Dear all,
>
> found a very weird and critical issue this morning.
> We are still investigating, but I'm posting this up front incase this
> is a known issue (hoping I could get direction as soon as possible).
>
> This morning two of my clients had a situation where all DBISAM
> tables in the database were renamed to error_tablename.dat (idx and
> blb).
>
> Is this at all dbisam related?
> We are now investigating virus related causes and programmatic causes.

A quick search of the source shows that ERROR_TABLENAME = 3; is the
only reference to this in DBISAM, as a constant integer.

I can't find anything else that might suggest it is in DBISAM, though
that doesn't rule it out of course.

I think I'd start with a disk scan for any file containing that string.


--

Matthew Jones

Danie


Just thinking about it and if you don't spot something reasonably quickly I'd check with Tim to definitely rule out DBISAM.

As I already said I don't remember any such comment on these newsgroups (I'm just doing a search on my offline for anything with the string error - if I find anything I'll post here) and I can't think of any reason Tim (or any database engine developer) would do such a thing.

Roy Lambert