Missing PO lines, incorrect Qty PO in Cname/Cstwh, Indexing Issues - Suspected AV issues(Sophos)

Hello Everyone,

One of our customers has been experiencing intermittent issues around the purchase ordering.

Sometimes they will post a purchase order and one or more of the PO lines are missing from Doline completely but Dohead has been updated.

Occasionally Cname/Cstwh qty PO figure is incorrect, sometimes higher than expected likely due to the above issue and in other times lower as it may not had have been updated at all.

They have also been getting regular index issues in tables like Doline which have required a UDS.

I suspect that this is due to AV interference, they are currently running Sophos and the following exclusions have been applied:

Process

For Opera 3 - Opera.exe (found in C:\Program Files (x86)\Pegasus\O3 Client VFP) - This has also been added to the exploit mitigation in Sophos

App Server

C:\Pegasus*

C:\Program Files\Pegasus

C:\Program Files (x86)\Pegasus

C:\ProgramData \Pegasus

C:\ProgramData\Application Data\Pegasus

C:\Program Files (x86)\Common Files\Pegasus Shared

C:\Program Files (x86)\Common Files\Microsoft Shared\VFP

%temp%\Pegasus

*where C is the drive Opera is installed on

All other computers/servers

\\servername\O3 Server VFP Static and Dynamic

C:\Program Files\Pegasus

C:\Program Files (x86)\Pegasus

C:\ProgramData\Pegasus

C:\ProgramData\Application Data\Pegasus

C:\Program Files (x86)\Common Files\Pegasus Shared

C:\Program Files (x86)\Common Files\Microsoft Shared\VFP

%temp%\Pegasus

File Types

.cdx

.dbc

.dct

.fpt

.dbf

.dcx

.frx

.frt

.lbx

.lbt

Has anyone else seen these sorts of issues?

Are there any exclusions which we may have missed?

Am I barking up the wrong tree? Is there anything else which could be causing this?

Any help would be greatly appreciated!

Jodie

Find more posts tagged with

Comments

DDiskel

Hi All

Just wanted to follow up and check if there was any resolution on this case?

DKB

michelle-stewart

We have a customer experiencing these issue too, I have a call open with Pegasus today to see if they have any ideas.

jodie

We are still monitoring but since IT have made some changes to the Exploit Mitigation in Sophos it appears to have settled down. We have had almost 3 weeks now without an index issue or an incorrect quantity PO.

I have a couple of select statements that I use to pull out a list of stock items where the quantity PO in Cname doesn't match doline which I can share if it's useful?

michelle-stewart

Thank you Jodie, I'll pass that on to our clients IT dept.

The select statements would be great, thank you.

DDiskel

Thank you , I will also log the call with Pegasus today and see what they say.

jodie

Open Doline and Cname in Foxpro
Run each of these select statements one after the other:
SELECT do_cnref,SUM(do_reqqty-do_recqty) as bal FROM a_doline GROUP BY do_cnref WHERE do_reqqty>do_recqty AND do_cmpltd =.f. AND !DELETED() AND !EMPTY(do_cnref) AND !EMPTY(ALLTRIM(do_dcref)) INTO CURSOR oabal

SELECT cn_ref,cn_onorder,IIF(ISNULL(bal),0,bal) as bal FROM a_cname LEFT JOIN oabal ON a_cname.cn_ref =oabal.do_cnref INTO CURSOR oabal2

SELECT * FROM oabal2 WHERE cn_onorder <> bal INTO CURSOR oafinal
Oafinal will give you a list of stock items with the current qty PO (CN_Order) and the calculated balance (Bal)

James Docherty

Hi this may or may not be that relevent, but we aslo have the following for AV exlcusions, as viruses can find any way in affecting files - if theres an open path

C:\Program Files (x86)\Common Files\Pegasus Shared

C:\Users\All Users\Pegasus

On both client & server

Also disabling of power management on network cards on each workstation (not av related)

Thanks - hope you get sorted!

Copyright © 2025 Infor. All rights reserved.