ransomware_detection icon indicating copy to clipboard operation
ransomware_detection copied to clipboard

Not Monitoring.

Open PauloBettin opened this issue 6 years ago • 12 comments

Showing no sequences in "monitoring" menu.

The sequences is only listed after scan on scan file menu.

PauloBettin avatar Sep 05 '19 21:09 PauloBettin

Are there any errors in log if you upload a file?

ilovemilk avatar Sep 06 '19 18:09 ilovemilk

Yes,

This is the error:

Error PHP Undefined variable: fileOperationSequence at /var/www/nextcloud/apps/ransomware_detection/lib/Controller/ScanController.php#257

Sincerely.

Paulo

Em sex, 6 de set de 2019 às 15:47, Matthias [email protected] escreveu:

Are there any errors in log if you upload a file?

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/undo-ransomware/ransomware_detection/issues/19?email_source=notifications&email_token=ANDKQNXKHFE3ESBQTW2LASTQIKQVJA5CNFSM4IUCTGQKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOD6DXJ4Q#issuecomment-528970994, or mute the thread https://github.com/notifications/unsubscribe-auth/ANDKQNRFAIY3UUSGZVKBIJLQIKQVJANCNFSM4IUCTGQA .

PauloBettin avatar Sep 06 '19 20:09 PauloBettin

I will fix this error in the new version but this can't be the reason for the problem that the monitoring is not working. This error relates to a problem during scanning.

What do you see in the monitoring tab? Nothing? Just the spinner? The message that there are no sequences?

Sincerely, Matthias

ilovemilk avatar Sep 11 '19 19:09 ilovemilk

I can see the spinner for a while, after this nothing is showing.

In "Scan Files" the sequences is showing correctly.

Sincerely.

Paulo Bettin

Em qua, 11 de set de 2019 às 16:31, Matthias [email protected] escreveu:

I will fix this error in the new version but this can't be the reason for the problem that the monitoring is not working. This error relates to a problem during scanning.

What do you see in the monitoring tab? Nothing? Just the spinner? The message that there are no sequences?

Sincerely, Matthias

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/undo-ransomware/ransomware_detection/issues/19?email_source=notifications&email_token=ANDKQNVM3UFYXYEW5PSY6ATQJFBQHA5CNFSM4IUCTGQKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOD6PUGGI#issuecomment-530531097, or mute the thread https://github.com/notifications/unsubscribe-auth/ANDKQNWMQTUZBQXJJQOK2ZLQJFBQHANCNFSM4IUCTGQA .

PauloBettin avatar Sep 11 '19 21:09 PauloBettin

Are there any errors in the browser console (you can open it by pressing F12 in your browser)?

Sincerely, Matthias

ilovemilk avatar Sep 12 '19 10:09 ilovemilk

Showing this error:

(index):1 Refused to load the image 'http://...../apps/updatenotification/img/notification.svg' because it violates the following Content Security Policy directive: "img-src 'self' data: blob:".

And this warnings:

manifest:1 Manifest: property 'start_url' ignored, should be same origin as document. globals.js:30 The escapeHTML library is deprecated! It will be removed in nextcloud 19.

But apparently this references is to another app.

I have used your app on a older version of NextCloud and i remenber to see the archivied sequences in this tab, is this correctly?

Now even i simulate a ransonware infection this tab is still show nothing with only the message "no sequences".

Sincerely.

Paulo Bettin

Em qui, 12 de set de 2019 às 07:28, Matthias [email protected] escreveu:

Are there any errors in the browser console (you can open it by pressing F12 in your browser)?

Sincerely, Matthias

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/undo-ransomware/ransomware_detection/issues/19?email_source=notifications&email_token=ANDKQNQ4XGRMOPUPBLW6VNDQJIKTTA5CNFSM4IUCTGQKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOD6RNJPA#issuecomment-530764988, or mute the thread https://github.com/notifications/unsubscribe-auth/ANDKQNWT3KXDWVKMZ4DZS4LQJIKTTANCNFSM4IUCTGQA .

PauloBettin avatar Sep 13 '19 02:09 PauloBettin

Thanks for the Info.

I have used your app on a older version of NextCloud and i remenber to see the archivied sequences in this tab, is this correctly?

Yes thats correct.

Now even i simulate a ransonware infection this tab is still show nothing with only the message "no sequences".

The behaviour and the UI didn't change in last updates, just fixes in the background were applied.

How do you sync your files?

ilovemilk avatar Sep 13 '19 08:09 ilovemilk

Hi,

Thanks for your clarification.

I sync the files from winscp application in webdav protocol and also from the web interface of nextcloud.

Nothing show in these two methods.

Sincerely.

Em sex, 13 de set de 2019 às 05:24, Matthias [email protected] escreveu:

Thanks for the Info.

I have used your app on a older version of NextCloud and i remenber to see the archivied sequences in this tab, is this correctly?

Yes thats correct.

Now even i simulate a ransonware infection this tab is still show nothing with only the message "no sequences".

The behaviour and the UI didn't change in last updates, just fixes in the background were applied.

How do you sync your files?

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/undo-ransomware/ransomware_detection/issues/19?email_source=notifications&email_token=ANDKQNT27NOOOUSE25IK3HTQJNE2TA5CNFSM4IUCTGQKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOD6UKXQQ#issuecomment-531147714, or mute the thread https://github.com/notifications/unsubscribe-auth/ANDKQNUSLNRGNJQMVYYEAYTQJNE2TANCNFSM4IUCTGQA .

PauloBettin avatar Sep 16 '19 14:09 PauloBettin

Hi,

this explains the problem:

  • We don't monitor file uploads via the web interface because ransomware can't change files via the web browser.
  • We also don't monitor files changed manually via webdav because ransomware yet doesn't upload files to cloud storages without auto-sync setup.

Do use webdav for auto-syncing files?

Sincerely, Matthias

ilovemilk avatar Sep 23 '19 11:09 ilovemilk

Yes Matthias,

I use web dav for autosync, with winscp.

A remember to see on the past the "monitoring tab" working, Maybe a test with the nextcloud client?

Thanks for your work, this module is awesome!

This feature (monitoring on webdav) can be implemented?

Sincerely Paulo Bettin.

Em seg, 23 de set de 2019 às 08:16, Matthias [email protected] escreveu:

Hi,

this explains the problem:

  • We don't monitor file uploads via the web interface because ransomware can't change files via the web browser.
  • We also don't monitor files changed manually via webdav because ransomware yet doesn't upload files to cloud storages without auto-sync setup.

Do use webdav for auto-syncing files?

Sincerely, Matthias

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/undo-ransomware/ransomware_detection/issues/19?email_source=notifications&email_token=ANDKQNWAJCM74GFYU7C6ASDQLCQQBA5CNFSM4IUCTGQKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOD7KQYLI#issuecomment-534055981, or mute the thread https://github.com/notifications/unsubscribe-auth/ANDKQNSEK75FE2ETD4MOLFTQLCQQBANCNFSM4IUCTGQA .

PauloBettin avatar Sep 23 '19 11:09 PauloBettin

Hi Paulo,

sure but would be awesome if you test it with the Nextcloud client first if it's also not working we have a different problem there.

Nevertheless, I will add it as feature request to the new version.

Sincerely Matthias

ilovemilk avatar Sep 25 '19 12:09 ilovemilk

Hi Matthias,

I have tested a couple of times since last mail, and with the nextcloud client it works great!

It will be awesome if you add this monitoring tool for the webdav connection.

Thank you so much for your help!

Sincerely.

Paulo Bettin

Em qua, 25 de set de 2019 às 09:03, Matthias [email protected] escreveu:

Hi Paulo,

sure but would be awesome if you test it with the Nextcloud client first if it's also not working we have a different problem there.

Nevertheless, I will add it as feature request to the new version.

Sincerely Matthias

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/undo-ransomware/ransomware_detection/issues/19?email_source=notifications&email_token=ANDKQNRTHT2Y2WLOHCXYYC3QLNHSJA5CNFSM4IUCTGQKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOD7RURVQ#issuecomment-534989014, or mute the thread https://github.com/notifications/unsubscribe-auth/ANDKQNX6J7NLIWNX25YWIL3QLNHSJANCNFSM4IUCTGQA .

PauloBettin avatar Sep 27 '19 14:09 PauloBettin