Closed damiankaczkowski closed 2 years ago
@damiankaczkowski I cannot reproduce the error during download of a file that is detected by Windows defender which Windows configuration option did you turn on that would help me reproduce your crash ?
Only local account connected to Windows AD. No Office365 account on Windows thus I think all cloud protection options are Disabled.
Scan Options: Quick scan Virus & threar protection settings
Ransomware protection
Firewall:
App & browser control
Core isolation - Memory integrity - Off
Rest options either Off or Default.
What I spot is that before crash Desktop Client is 30-60 second of freezed due to Defender Lock. After freeze, it unfreezes, shows normal red font error on Client Settings screen and right after that it crashes.
Here is the archive that should contain the affected file:
https://www.mediafire.com/file/nppv7fn8whbkpef/CH341A-programmer-software-1.17.zip/file
Archive was unpacked in path which is >140 chars long.
thanks @damiankaczkowski
This bug report did not receive an update in the last 4 weeks. Please take a look again and update the issue with new details, otherwise the issue will be automatically closed in 2 weeks. Thank you!
I see pretty the same issue.. client crashes while syncing a PowerShell script which is blocked by Defender as HackTool:Win32/Mimikatz!dha - the detection is not wrong as the script is used to display this technique - but the client definitely should not stop and crash..
I see an error 1000 in application event log
Faulting application name: nextcloud.exe, version: 3.3.4.25832, time stamp: 0x614895d0 Faulting module name: Qt5Core.dll, version: 5.12.10.0, time stamp: 0x5fa1244d Exception code: 0xc0000005 Fault offset: 0x00000000001291ab Faulting process id: 0x19f8 Faulting application start time: 0x01d7b56eda417a95 Faulting application path: C:\Program Files\Nextcloud\nextcloud.exe Faulting module path: C:\Program Files\Nextcloud\Qt5Core.dll Report Id: a64a88a3-111b-4590-99b9-92732b2e3d6c Faulting package full name: Faulting package-relative application ID:
application log (c:\Users\mywindowsuser\AppData\Roaming\Nextcloud\logs\20210929_2216_owncloud.log.0 ) ends with this lines (personal info redacted) no more entires and previous seems to be OK. the file is 94MB despite the fact the client was running only few seconds before crash (crashed on same issue moments before):
2021-09-29 22:16:26:278 [ debug nextcloud.gui.folder ] [ OCC::Folder::slotWatchedPathChanged ]: Changed path was touched by SyncEngine, ignoring: "C:/Nextcloud/Documents/PowerShell/destination/pso/CustomElements/Icons/Common/appbar.arrow.up.down.xaml" 2021-09-29 22:16:26:278 [ debug nextcloud.gui.folderwatcher ] [ OCC::FolderWatcher::pathIsIgnored ]: * Ignoring file "C:/Nextcloud/Documents/PowerShell/destination/pso/CustomElements/Icons/Common/.appbar.arrow.up.down.xaml.~4d8" 2021-09-29 22:16:26:278 [ info nextcloud.gui.folderwatcher ]: Detected changes in paths: QSet("C:/Nextcloud/Documents/PowerShell/destination/pso/CustomElements/Icons/Common/appbar.arrow.up.down.xaml") 2021-09-29 22:16:26:278 [ debug nextcloud.gui.folder ] [ OCC::Folder::slotWatchedPathChanged ]: Changed path was touched by SyncEngine, ignoring: "C:/Nextcloud/Documents/PowerShell/destination/pso/CustomElements/Icons/Common/appbar.arrow.up.down.xaml" 2021-09-29 22:16:26:293 [ warning nextcloud.sync.checksums ]: Could not open file "C:/Nextcloud/Documents/PowerShell/destination/.inject-logoncredentials2.ps1 (restored).md.~45e0" for reading to compute a checksum "Operation did not complete successfully because the file contains a virus or potentially unwanted software." 2021-09-29 22:16:26:293 [ debug nextcloud.sync.propagator ] [ OCC::OwncloudPropagator::localFileNameClash ]: CaseClashCheck for "C:/Nextcloud/Documents/PowerShell/destination/inject-logoncredentials2.ps1 (restored).md" 2021-09-29 22:16:26:294 [ warning nextcloud.sync.filesystem ]: Renaming temp file to final failed: "WindowsError: e1: Operation did not complete successfully because the file contains a virus or potentially unwanted software." 2021-09-29 22:16:26:294 [ warning nextcloud.sync.propagator.download ]: "Rename failed: C:/Nextcloud/Documents/PowerShell/destination/.inject-logoncredentials2.ps1 (restored).md.~45e0 => C:/Nextcloud/Documents/PowerShell/destination/inject-logoncredentials2.ps1 (restored).md" 2021-09-29 22:16:26:295 [ debug nextcloud.sync.vfs.cfapi.wrapper ] [ `anonymous-namespace'::cfApiFetchDataCallback ]: Fetch data callback called. File size: 429540 2021-09-29 22:16:42:878 [ warning nextcloud.gui.folderwatcher ]: Error converting file name "\\?\C:\Nextcloud\Documents\PowerShell\destination\.inject-logoncredentials2.ps1 (restored).md.~45e0" to full length, keeping original name. "WindowsError: 5: Access is denied." 2021-09-29 22:16:42:878 [ warning nextcloud.gui.folderwatcher ]: Error converting file name "\\?\C:\Nextcloud\Documents\PowerShell\destination\.inject-logoncredentials2.ps1 (restored).md.~45e0" to full length, keeping original name. "WindowsError: 2: The system cannot find the file specified." 2021-09-29 22:16:57:651 [ debug nextcloud.gui.folderwatcher ] [ OCC::WatcherThread::watchChanges ]: Skipping syncing of "C:/Nextcloud/Documents/PowerShell/destination/large" 2021-09-29 22:16:58:773 [ debug nextcloud.gui.folderwatcher ] [ OCC::WatcherThread::watchChanges ]: Skipping syncing of "C:/Nextcloud/Documents/PowerShell/destination/large" 2021-09-29 22:17:26:855 [ info nextcloud.sync.vfs.cfapi.wrapper ]: Cancel fetch data of "C:\Nextcloud\Documents\PowerShell\destination\inject-logoncredentials2.ps1 (restored).md" 2021-09-29 22:17:26:856 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::bindValue ]: SQL bind 1 "Documents/PowerShell/PowerShell_Advanced_Kurs_2019/Stick2/large/inject-logoncredentials2.ps1 (restored).md" 2021-09-29 22:17:26:856 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::exec ]: SQL exec "SELECT lastTryEtag, lastTryModtime, retrycount, errorstring, lastTryTime, ignoreDuration, renameTarget, errorCategory, requestId FROM blacklist WHERE path=?1 COLLATE NOCASE" 2021-09-29 22:17:26:856 [ info nextcloud.sync.database ]: Setting blacklist entry for "Documents/PowerShell/PowerShell_Advanced_Kurs_2019/Stick2/large/inject-logoncredentials2.ps1 (restored).md" 3 "WindowsError: e1: Operation did not complete successfully because the file contains a virus or potentially unwanted software." 1632946646 0 1627511028 "e6d6c26cb4efd6ac4f4e328b709e62b2" "" 0 2021-09-29 22:17:26:856 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::bindValue ]: SQL bind 1 "Documents/PowerShell/PowerShell_Advanced_Kurs_2019/Stick2/large/inject-logoncredentials2.ps1 (restored).md" 2021-09-29 22:17:26:856 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::bindValue ]: SQL bind 2 "e6d6c26cb4efd6ac4f4e328b709e62b2" 2021-09-29 22:17:26:856 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::bindValue ]: SQL bind 3 1627511028 2021-09-29 22:17:26:856 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::bindValue ]: SQL bind 4 3 2021-09-29 22:17:26:856 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::bindValue ]: SQL bind 5 "WindowsError: e1: Operation did not complete successfully because the file contains a virus or potentially unwanted software." 2021-09-29 22:17:26:856 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::bindValue ]: SQL bind 6 1632946646 2021-09-29 22:17:26:856 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::bindValue ]: SQL bind 7 0 2021-09-29 22:17:26:856 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::bindValue ]: SQL bind 8 "" 2021-09-29 22:17:26:856 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::bindValue ]: SQL bind 9 0 2021-09-29 22:17:26:856 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::bindValue ]: SQL bind 10 "c7b9abc5-df96-4dcb-84e8-0013351b7135" 2021-09-29 22:17:26:856 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::exec ]: SQL exec "INSERT OR REPLACE INTO blacklist (path, lastTryEtag, lastTryModtime, retrycount, errorstring, lastTryTime, ignoreDuration, renameTarget, errorCategory, requestId) VALUES ( ?1, ?2, ?3, ?4, ?5, ?6, ?7, ?8, ?9, ?10)" 2021-09-29 22:17:26:856 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::exec ]: Last exec affected 1 rows. 2021-09-29 22:17:26:856 [ warning nextcloud.sync.propagator ]: escalating soft error on "Documents/PowerShell/PowerShell_Advanced_Kurs_2019/Stick2/large/inject-logoncredentials2.ps1 (restored).md" to normal error, 200 2021-09-29 22:17:26:856 [ warning nextcloud.sync.propagator ]: Could not complete propagation of "Documents/PowerShell/PowerShell_Advanced_Kurs_2019/Stick2/large/inject-logoncredentials2.ps1 (restored).md" by OCC::PropagateDownloadFile(0x2c303842d10) with status OCC::SyncFileItem::NormalError and error: "WindowsError: e1: Operation did not complete successfully because the file contains a virus or potentially unwanted software." 2021-09-29 22:17:26:856 [ debug nextcloud.sync.statustracker ] [ OCC::SyncFileStatusTracker::slotItemCompleted ]: Item completed "Documents/PowerShell/PowerShell_Advanced_Kurs_2019/Stick2/large/inject-logoncredentials2.ps1 (restored).md" OCC::SyncFileItem::NormalError CSyncEnums::CSYNC_INSTRUCTION_SYNC 2021-09-29 22:17:26:856 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::bindValue ]: SQL bind 1 -2945515776080496027 2021-09-29 22:17:26:856 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::exec ]: SQL exec "SELECT path, inode, modtime, type, md5, fileid, remotePerm, filesize, ignoredChildrenRemote, contentchecksumtype.name || ':' || contentChecksum, e2eMangledName, isE2eEncrypted FROM metadata LEFT JOIN checksumtype as contentchecksumtype ON metadata.contentChecksumTypeId == contentchecksumtype.id WHERE phash=?1" 2021-09-29 22:17:26:857 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::bindValue ]: SQL bind 1 8412932110639274130 2021-09-29 22:17:26:857 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::exec ]: SQL exec "SELECT path, inode, modtime, type, md5, fileid, remotePerm, filesize, ignoredChildrenRemote, contentchecksumtype.name || ':' || contentChecksum, e2eMangledName, isE2eEncrypted FROM metadata LEFT JOIN checksumtype as contentchecksumtype ON metadata.contentChecksumTypeId == contentchecksumtype.id WHERE phash=?1" 2021-09-29 22:17:26:857 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::bindValue ]: SQL bind 1 -3841090803337267761 2021-09-29 22:17:26:857 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::exec ]: SQL exec "SELECT path, inode, modtime, type, md5, fileid, remotePerm, filesize, ignoredChildrenRemote, contentchecksumtype.name || ':' || contentChecksum, e2eMangledName, isE2eEncrypted FROM metadata LEFT JOIN checksumtype as contentchecksumtype ON metadata.contentChecksumTypeId == contentchecksumtype.id WHERE phash=?1" 2021-09-29 22:17:26:857 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::bindValue ]: SQL bind 1 -1132587390990831533 2021-09-29 22:17:26:857 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::exec ]: SQL exec "SELECT path, inode, modtime, type, md5, fileid, remotePerm, filesize, ignoredChildrenRemote, contentchecksumtype.name || ':' || contentChecksum, e2eMangledName, isE2eEncrypted FROM metadata LEFT JOIN checksumtype as contentchecksumtype ON metadata.contentChecksumTypeId == contentchecksumtype.id WHERE phash=?1" 2021-09-29 22:17:26:857 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::bindValue ]: SQL bind 1 2283632931218926271 2021-09-29 22:17:26:857 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::exec ]: SQL exec "SELECT path, inode, modtime, type, md5, fileid, remotePerm, filesize, ignoredChildrenRemote, contentchecksumtype.name || ':' || contentChecksum, e2eMangledName, isE2eEncrypted FROM metadata LEFT JOIN checksumtype as contentchecksumtype ON metadata.contentChecksumTypeId == contentchecksumtype.id WHERE phash=?1" 2021-09-29 22:17:26:857 [ warning nextcloud.gui.activity ]: Item "Documents/PowerShell/PowerShell_Advanced_Kurs_2019/Stick2/large/inject-logoncredentials2.ps1 (restored).md" retrieved resulted in "WindowsError: e1: Operation did not complete successfully because the file contains a virus or potentially unwanted software." 2021-09-29 22:17:26:857 [ warning nextcloud.gui.activity ]: Item "Documents/PowerShell/PowerShell_Advanced_Kurs_2019/Stick2/large/inject-logoncredentials2.ps1 (restored).md" retrieved resulted in error "WindowsError: e1: Operation did not complete successfully because the file contains a virus or potentially unwanted software." 2021-09-29 22:17:26:857 [ info nextcloud.gui.activity ]: Error successfully added to the notification list: "WindowsError: e1: Operation did not complete successfully because the file contains a virus or potentially unwanted software." 2021-09-29 22:17:26:860 [ warning nextcloud.sync.pushnotifications ]: Websocket error on with account QUrl("https://nc.mycloud.tld") QAbstractSocket::RemoteHostClosedError 2021-09-29 22:17:26:860 [ info nextcloud.sync.pushnotifications ]: Close websocket for account QUrl("https://nc.mycloud.tld") 2021-09-29 22:17:26:860 [ info nextcloud.sync.pushnotifications ]: Disconnected from websocket for account QUrl("https://nc.mycloud.tld") 2021-09-29 22:17:26:860 [ info nextcloud.sync.account ]: Disable push notifications object because authentication failed or connection lost 2021-09-29 22:17:26:860 [ debug nextcloud.gui.activity ] [ OCC::User::setNotificationRefreshInterval ]: Starting Notification refresh timer with 300 sec interval 2021-09-29 22:17:26:863 [ info nextcloud.gui.folder.manager ]: Etag poll timer timeout 2021-09-29 22:17:26:863 [ info nextcloud.gui.folder.manager ]: Folders to sync: 1 2021-09-29 22:17:26:863 [ info nextcloud.gui.folder.manager ]: Number of folders that don't use push notifications: 1 2021-09-29 22:17:26:863 [ info nextcloud.gui.folder.manager ]: Run etag job on folder OCC::Folder(0x2c37c833070) 2021-09-29 22:17:26:863 [ info nextcloud.gui.folder.manager ]: Can not run etag job: Sync is running 2021-09-29 22:17:26:864 [ debug nextcloud.sync.connectionvalidator ] [ OCC::ConnectionValidator::checkAuthentication ]: # Check whether authenticated propfind works. 2021-09-29 22:17:26:864 [ info nextcloud.sync.accessmanager ]: 6 "PROPFIND" "https://nc.mycloud.tld/remote.php/dav/files/mywindowsuser/" has X-Request-ID "bf7d09c1-0f7b-418c-9bee-5cbb2af1252b" 2021-09-29 22:17:26:864 [ debug nextcloud.sync.cookiejar ] [ OCC::CookieJar::cookiesForUrl ]: QUrl("https://nc.mycloud.tld/remote.php/dav/files/mywindowsuser/") requests: (QNetworkCookie("__Host-nc_sameSiteCookielax=true; secure; HttpOnly; expires=Fri, 31-Dec-2100 23:59:59 GMT; domain=nc.mycloud.tld; path=/"), QNetworkCookie("__Host-nc_sameSiteCookiestrict=true; secure; HttpOnly; expires=Fri, 31-Dec-2100 23:59:59 GMT; domain=nc.mycloud.tld; path=/"), QNetworkCookie("oc_sessionPassphrase=uYPJxuHfKoIgPbEZXtqq7NdxihwY85ljfC5XRl0NQVz0J%2B8ShlhQQxtm9R88O8lHvsz1gPAuRK5WpRg5C71M0TwD3vY5SHHTkVT49r64om%2FS0jpuoQOnmzEWGreGoDca; secure; HttpOnly; domain=nc.mycloud.tld; path=/"), QNetworkCookie("occ5uwmhix0f=13802d82d8a42d49000fa3d7524f6535; secure; HttpOnly; domain=nc.mycloud.tld; path=/")) 2021-09-29 22:17:26:864 [ info nextcloud.sync.networkjob ]: OCC::PropfindJob created for "https://nc.mycloud.tld" + "/" "OCC::ConnectionValidator" 2021-09-29 22:17:26:864 [ debug nextcloud.gui.folderwatcher ] [ OCC::FolderWatcher::pathIsIgnored ]: * Ignoring file "C:/Nextcloud/Documents/PowerShell/destination/.inject-logoncredentials2.ps1 (restored).md.~45e0" 2021-09-29 22:17:26:864 [ info nextcloud.sync.vfs.cfapi ]: Received request to hydrate "C:\Nextcloud\Documents\PowerShell\destination\inject-logoncredentials2.ps1 (restored).md" "1d7ae67a21a17af" 2021-09-29 22:17:26:864 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::bindValue ]: SQL bind 1 6960150402664136747 2021-09-29 22:17:26:864 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::exec ]: SQL exec "SELECT path, inode, modtime, type, md5, fileid, remotePerm, filesize, ignoredChildrenRemote, contentchecksumtype.name || ':' || contentChecksum, e2eMangledName, isE2eEncrypted FROM metadata LEFT JOIN checksumtype as contentchecksumtype ON metadata.contentChecksumTypeId == contentchecksumtype.id WHERE phash=?1" 2021-09-29 22:17:26:864 [ info nextcloud.gui.folder ]: folder "1" Terminating! 2021-09-29 22:17:26:864 [ info nextcloud.sync.engine ]: Aborting sync 2021-09-29 22:17:26:865 [ info nextcloud.gui.folder.manager ]: >========== Sync started for folder [C:\Nextcloud] of account [mywindowsuser@nc.mycloud.tld] with remote [https://nc.mycloud.tld/remote.php/dav/files/mywindowsuser/] 2021-09-29 22:17:26:865 [ debug nextcloud.gui.socketapi ] [ OCC::SocketApi::slotUpdateFolderView ]: Not sending UPDATE_VIEW for "1" because status() is OCC::SyncResult::SyncRunning 2021-09-29 22:17:26:866 [ info nextcloud.gui.application ]: Sync state changed for folder "https://nc.mycloud.tld/remote.php/dav/files/mywindowsuser/" : "Sync Running" 2021-09-29 22:17:26:866 [ info nextcloud.sync.vfs.hydrationjob ]: Server ready, waiting for connections "1d7ae67a21a17af:cancellation" "C:/Nextcloud/" "Documents/PowerShell/PowerShell_Advanced_Kurs_2019/Stick2/large/inject-logoncredentials2.ps1 (restored).md" 2021-09-29 22:17:26:866 [ info nextcloud.sync.vfs.hydrationjob ]: Server ready, waiting for connections "1d7ae67a21a17af" "C:/Nextcloud/" "Documents/PowerShell/PowerShell_Advanced_Kurs_2019/Stick2/large/inject-logoncredentials2.ps1 (restored).md" 2021-09-29 22:17:26:867 [ info nextcloud.sync.vfs.cfapi.wrapper ]: VFS replied for hydration of "C:\Nextcloud\Documents\PowerShell\destination\inject-logoncredentials2.ps1 (restored).md" "1d7ae67a21a17af" status was: true 2021-09-29 22:17:26:869 [ info nextcloud.sync.credentials.webflow ]: request finished 2021-09-29 22:17:26:869 [ info nextcloud.sync.checksums ]: Computing "SHA1" checksum of "C:/Nextcloud/Documents/PowerShell/destination/pso/CustomElements/Icons/Common/.appbar.at.xaml.~7e7d" in a thread 2021-09-29 22:17:26:869 [ debug nextcloud.sync.networkjob ] [ OCC::AbstractNetworkJob::slotFinished ]: Network job OCC::GETFileJob finished for "/Documents/PowerShell/destination/pso/CustomElements/Icons/Common/appbar.at.xaml" 2021-09-29 22:17:26:869 [ debug nextcloud.sync.networkjob.get ] [ OCC::GETFileJob::slotReadyRead ]: Actually finished! 2021-09-29 22:17:26:870 [ info nextcloud.sync.credentials.webflow ]: request finished 2021-09-29 22:17:26:870 [ info nextcloud.sync.checksums ]: Computing "SHA1" checksum of "C:/Nextcloud/Documents/PowerShell/destination/pso/CustomElements/Icons/Common/.appbar.axis.x.letter.xaml.~2bf7" in a thread 2021-09-29 22:17:26:870 [ debug nextcloud.sync.networkjob ] [ OCC::AbstractNetworkJob::slotFinished ]: Network job OCC::GETFileJob finished for "/Documents/PowerShell/destination/pso/CustomElements/Icons/Common/appbar.axis.x.letter.xaml" 2021-09-29 22:17:26:870 [ debug nextcloud.sync.networkjob.get ] [ OCC::GETFileJob::slotReadyRead ]: Actually finished! 2021-09-29 22:17:26:871 [ info nextcloud.sync.credentials.webflow ]: request finished 2021-09-29 22:17:26:871 [ info nextcloud.sync.checksums ]: Computing "SHA1" checksum of "C:/Nextcloud/Documents/PowerShell/destination/pso/CustomElements/Icons/Common/.appbar.arrow.up.xaml.~28b3" in a thread 2021-09-29 22:17:26:871 [ debug nextcloud.sync.networkjob ] [ OCC::AbstractNetworkJob::slotFinished ]: Network job OCC::GETFileJob finished for "/Documents/PowerShell/destination/pso/CustomElements/Icons/Common/appbar.arrow.up.xaml" 2021-09-29 22:17:26:871 [ debug nextcloud.sync.networkjob.get ] [ OCC::GETFileJob::slotReadyRead ]: Actually finished! 2021-09-29 22:17:26:872 [ info nextcloud.sync.credentials.webflow ]: request finished 2021-09-29 22:17:26:872 [ info nextcloud.sync.checksums ]: Computing "SHA1" checksum of "C:/Nextcloud/Documents/PowerShell/destination/pso/CustomElements/Icons/Common/.appbar.axis.three.xaml.~2642" in a thread 2021-09-29 22:17:26:872 [ debug nextcloud.sync.networkjob ] [ OCC::AbstractNetworkJob::slotFinished ]: Network job OCC::GETFileJob finished for "/Documents/PowerShell/destination/pso/CustomElements/Icons/Common/appbar.axis.three.xaml" 2021-09-29 22:17:26:872 [ debug nextcloud.sync.networkjob.get ] [ OCC::GETFileJob::slotReadyRead ]: Actually finished! 2021-09-29 22:17:26:872 [ info nextcloud.sync.vfs.cfapi ]: Cancel hydration
actually after whitelisting the problematic file in Defender the sync worked for some more seconds but failed again without any visible issue. look like the last action is always cancel hydration
Faulting application name: nextcloud.exe, version: 3.3.4.25832, time stamp: 0x614895d0 Faulting module name: Qt5Core.dll, version: 5.12.10.0, time stamp: 0x5fa1244d Exception code: 0xc0000005 Fault offset: 0x00000000001291ab Faulting process id: 0x5580 Faulting application start time: 0x01d7b572cbefec5f Faulting application path: C:\Program Files\Nextcloud\nextcloud.exe Faulting module path: C:\Program Files\Nextcloud\Qt5Core.dll Report Id: 77ce116f-6de1-4503-8cb9-5be193a30968 Faulting package full name: Faulting package-relative application ID:
last log lines are:
2021-09-29 22:45:39:842 [ info nextcloud.gui.folder.manager ]: >========== Sync started for folder [C:\Nextcloud] of account [mynextclouduser@nc.mycloud.tld] with remote [https://nc.mycloud.tld/remote.php/dav/files/mynextclouduser/] 2021-09-29 22:45:39:842 [ debug nextcloud.gui.socketapi ] [ OCC::SocketApi::slotUpdateFolderView ]: Not sending UPDATE_VIEW for "1" because status() is OCC::SyncResult::SyncRunning 2021-09-29 22:45:39:843 [ info nextcloud.gui.application ]: Sync state changed for folder "https://nc.mycloud.tld/remote.php/dav/files/willi/" : "Sync Running" 2021-09-29 22:45:39:843 [ info nextcloud.sync.vfs.hydrationjob ]: Server ready, waiting for connections "1d7ae67a21bc0c9:cancellation" "C:/Nextcloud/" "Documents/PowerShell/destination/inject-logoncredentials2.ps1 (restored).md" 2021-09-29 22:45:39:843 [ info nextcloud.sync.vfs.hydrationjob ]: Server ready, waiting for connections "1d7ae67a21bc0c9" "C:/Nextcloud/" "Documents/PowerShell/destination/inject-logoncredentials2.ps1 (restored).md" 2021-09-29 22:45:39:843 [ debug nextcloud.sync.propagator ] [ OCC::OwncloudPropagator::localFileNameClash ]: CaseClashCheck for "C:/Nextcloud/Documents/PowerShell/destination/pso/CustomElements/Test/testing.psoxml" 2021-09-29 22:45:39:843 [ info nextcloud.sync.vfs.cfapi.wrapper ]: VFS replied for hydration of "C:\Nextcloud\Documents\PowerShell\destination\inject-logoncredentials2.ps1 (restored).md" "1d7ae67a21bc0c9" status was: true 2021-09-29 22:45:39:846 [ debug nextcloud.gui.folderwatcher ] [ OCC::WatcherThread::watchChanges ]: Skipping syncing of "C:/Nextcloud/Documents/PowerShell/destination/pso/CustomElements/Test" 2021-09-29 22:45:39:846 [ debug nextcloud.sync.fileitem ] [ OCC::SyncFileItem::toSyncJournalFileRecordWithInode ]: "C:/Nextcloud/Documents/PowerShell/destination/pso/CustomElements/Test/testing.psoxml" Retrieved inode 202632 (previous item inode: 203776 ) 2021-09-29 22:45:39:846 [ info nextcloud.sync.database ]: Updating file record for path: "Documents/PowerShell/pso/CustomElements/Test/testing.psoxml" inode: 202632 modtime: 1501688872 type: CSyncEnums::ItemTypeFile etag: "c80f0a6d9e264663452f3461aed51efa" fileId: "01126002occ5uwmhix0f" remotePerm: "WDNVR" fileSize: 1131 checksum: "SHA1:7d39412c8d7a534c476cfe5fe64f61b42238e53a" e2eMangledName: "" isE2eEncrypted: false 2021-09-29 22:45:39:846 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::bindValue ]: SQL bind 1 7317303518851605276 2021-09-29 22:45:39:846 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::bindValue ]: SQL bind 2 96 2021-09-29 22:45:39:846 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::bindValue ]: SQL bind 3 "Documents/PowerShell/pso/CustomElements/Test/testing.psoxml" 2021-09-29 22:45:39:846 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::bindValue ]: SQL bind 4 202632 2021-09-29 22:45:39:846 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::bindValue ]: SQL bind 5 0 2021-09-29 22:45:39:846 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::bindValue ]: SQL bind 6 0 2021-09-29 22:45:39:846 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::bindValue ]: SQL bind 7 0 2021-09-29 22:45:39:846 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::bindValue ]: SQL bind 8 1501688872 2021-09-29 22:45:39:846 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::bindValue ]: SQL bind 9 CSyncEnums::ItemTypeFile 2021-09-29 22:45:39:846 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::bindValue ]: SQL bind 10 "c80f0a6d9e264663452f3461aed51efa" 2021-09-29 22:45:39:846 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::bindValue ]: SQL bind 11 "01126002occ5uwmhix0f" 2021-09-29 22:45:39:846 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::bindValue ]: SQL bind 12 "WDNVR" 2021-09-29 22:45:39:846 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::bindValue ]: SQL bind 13 1131 2021-09-29 22:45:39:846 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::bindValue ]: SQL bind 14 0 2021-09-29 22:45:39:846 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::bindValue ]: SQL bind 15 "7d39412c8d7a534c476cfe5fe64f61b42238e53a" 2021-09-29 22:45:39:846 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::bindValue ]: SQL bind 16 1 2021-09-29 22:45:39:846 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::bindValue ]: SQL bind 17 "" 2021-09-29 22:45:39:846 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::bindValue ]: SQL bind 18 false 2021-09-29 22:45:39:846 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::exec ]: SQL exec "INSERT OR REPLACE INTO metadata (phash, pathlen, path, inode, uid, gid, mode, modtime, type, md5, fileid, remotePerm, filesize, ignoredChildrenRemote, contentChecksum, contentChecksumTypeId, e2eMangledName, isE2eEncrypted) VALUES (?1 , ?2, ?3 , ?4 , ?5 , ?6 , ?7, ?8 , ?9 , ?10, ?11, ?12, ?13, ?14, ?15, ?16, ?17, ?18);" 2021-09-29 22:45:39:846 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::exec ]: Last exec affected 1 rows. 2021-09-29 22:45:39:846 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::bindValue ]: SQL bind 1 "" 2021-09-29 22:45:39:846 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::exec ]: SQL exec "DELETE FROM downloadinfo WHERE path=?1" 2021-09-29 22:45:39:846 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::exec ]: Last exec affected 0 rows. 2021-09-29 22:45:39:846 [ debug nextcloud.sync.database ] [ OCC::SyncJournalDb::commitInternal ]: Transaction commit "download file start2" and starting new transaction 2021-09-29 22:45:39:846 [ info nextcloud.sync.propagator ]: Completed propagation of "Documents/PowerShell/pso/CustomElements/Test/testing.psoxml" by OCC::PropagateDownloadFile(0x1942a477280) with status OCC::SyncFileItem::Success 2021-09-29 22:45:39:846 [ debug nextcloud.sync.statustracker ] [ OCC::SyncFileStatusTracker::slotItemCompleted ]: Item completed "Documents/PowerShell/destination/pso/CustomElements/Test/testing.psoxml" OCC::SyncFileItem::Success CSyncEnums::CSYNC_INSTRUCTION_SYNC 2021-09-29 22:45:39:846 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::bindValue ]: SQL bind 1 -6877726739293078538 2021-09-29 22:45:39:846 [ debug nextcloud.sync.database.sql ] [ OCC::SqlQuery::exec ]: SQL exec "SELECT path, inode, modtime, type, md5, fileid, remotePerm, filesize, ignoredChildrenRemote, contentchecksumtype.name || ':' || contentChecksum, e2eMangledName, isE2eEncrypted FROM metadata LEFT JOIN checksumtype as contentchecksumtype ON metadata.contentChecksumTypeId == contentchecksumtype.id WHERE phash=?1" 2021-09-29 22:45:39:848 [ warning nextcloud.gui.activity ]: Item "Documents/PowerShell/pso/CustomElements/Test/testing.psoxml" retrieved resulted in "" 2021-09-29 22:45:39:848 [ warning nextcloud.gui.activity ]: Item "Documents/PowerShell/pso/CustomElements/Test/testing.psoxml" retrieved successfully. 2021-09-29 22:45:39:848 [ info nextcloud.gui.activity ]: Successfully added to the activity list: "" 2021-09-29 22:45:39:848 [ warning nextcloud.sync.propagator.download ]: WARNING: Unexpectedly slow connection, took 60727 msec for 1131 bytes for "Documents/PowerShell/pso/CustomElements/Test/testing.psoxml" 2021-09-29 22:45:39:849 [ info nextcloud.sync.credentials.webflow ]: request finished 2021-09-29 22:45:39:849 [ info nextcloud.sync.checksums ]: Computing "SHA1" checksum of "C:/Nextcloud/Documents/PowerShell/destination/pso/CustomElements/Icons/Common/.appbar.axis.z.letter.xaml.~417e" in a thread 2021-09-29 22:45:39:849 [ debug nextcloud.sync.networkjob ] [ OCC::AbstractNetworkJob::slotFinished ]: Network job OCC::GETFileJob finished for "/Documents/PowerShell/pso/CustomElements/Icons/Common/appbar.axis.z.letter.xaml" 2021-09-29 22:45:39:849 [ debug nextcloud.sync.networkjob.get ] [ OCC::GETFileJob::slotReadyRead ]: Actually finished! 2021-09-29 22:45:39:849 [ info nextcloud.sync.credentials.webflow ]: request finished 2021-09-29 22:45:39:849 [ info nextcloud.sync.checksums ]: Computing "SHA1" checksum of "C:/Nextcloud/Documents/PowerShell/destination/pso/CustomElements/Icons/Common/.appbar.axis.xy.xaml.~7e4" in a thread 2021-09-29 22:45:39:850 [ debug nextcloud.sync.networkjob ] [ OCC::AbstractNetworkJob::slotFinished ]: Network job OCC::GETFileJob finished for "/Documents/PowerShell/pso/CustomElements/Icons/Common/appbar.axis.xy.xaml" 2021-09-29 22:45:39:850 [ debug nextcloud.sync.networkjob.get ] [ OCC::GETFileJob::slotReadyRead ]: Actually finished! 2021-09-29 22:45:39:850 [ info nextcloud.sync.credentials.webflow ]: request finished 2021-09-29 22:45:39:850 [ info nextcloud.sync.checksums ]: Computing "SHA1" checksum of "C:/Nextcloud/Documents/PowerShell/destination/pso/CustomElements/Icons/Common/.appbar.axis.yx.xaml.~2d92" in a thread 2021-09-29 22:45:39:850 [ debug nextcloud.sync.networkjob ] [ OCC::AbstractNetworkJob::slotFinished ]: Network job OCC::GETFileJob finished for "/Documents/PowerShell/pso/CustomElements/Icons/Common/appbar.axis.yx.xaml" 2021-09-29 22:45:39:850 [ debug nextcloud.sync.networkjob.get ] [ OCC::GETFileJob::slotReadyRead ]: Actually finished! 2021-09-29 22:45:39:851 [ info nextcloud.sync.credentials.webflow ]: request finished 2021-09-29 22:45:39:851 [ warning nextcloud.sync.checksums ]: Failed to parse "" 2021-09-29 22:45:39:851 [ info nextcloud.sync.checksums ]: Computing "SHA1" checksum of "C:/Nextcloud/Documents/PowerShell/destination/PowerShell_Advanced_Kurs/somefolder/.somefile.~2fd8" in a thread 2021-09-29 22:45:39:851 [ debug nextcloud.sync.networkjob ] [ OCC::AbstractNetworkJob::slotFinished ]: Network job OCC::GETFileJob finished for "/Documents/PowerShell/PowerShell_Advanced_Kurs/somefolder/somefile" 2021-09-29 22:45:39:851 [ debug nextcloud.sync.networkjob.get ] [ OCC::GETFileJob::slotReadyRead ]: Actually finished! 2021-09-29 22:45:39:851 [ info nextcloud.sync.vfs.cfapi ]: Cancel hydration
This bug report did not receive an update in the last 4 weeks. Please take a look again and update the issue with new details, otherwise the issue will be automatically closed in 2 weeks. Thank you!
unstale
This bug report did not receive an update in the last 4 weeks. Please take a look again and update the issue with new details, otherwise the issue will be automatically closed in 2 weeks. Thank you!
This bug report is getting automatically closed due to no answer since the issue has been staled. Thank you!
How to use GitHub
Expected behaviour
Windows Defender blocks file access. Nextcloud Desktop Client makes error notice and go on with other files.
Actual behaviour
Nextcloud Desktop Client crashes and closes.
Steps to reproduce
Just run sync and let it process the file that Windows Defender do not like.
Client configuration
Client version: Desktop Client 3.3.2
Operating system: Windows 10 Pro 21H1
OS language: English
Installation path of client: Default - Program Files.
Server configuration
Nextcloud version: 22.1.1
Storage backend: Hard drive.
Logs
<no more logs - client crashes and closes>