Issue with Sync

Support
1

When trying to sync my notes today i noticed that the sync status on the application was giving me a error on the sync saying "Error: Malware Detected"

I work in security and my notes do contain some things that may be have gotten flagged as malware and im not to sure when it started.

My current version according to my Joplin app is:
Joplin 2.7.15 (prod, win32)
Sync Version: 3
Profile Version: 41
Keychain Supported: Yes
Revision: 8352e23
Running on Windows 10 syncing with onedrive

I'm not sure if this is just a bug or if it is detecting something I have saved in my notes or an even bigger issue.

2

I'm guessing this is a response from OneDrive being shown in the sync pane? Can you share the log file?

If so then its not really within Joplin's control if OneDrive thinks the resource is malware and won't permit it to be uploaded.

You can use the Note Attachements tool (Tools > Note attachements) to review all of your attached files if you think there is something obvious that you can strip out that might be breaking it.

3

according to that page it only shows screenshots, I don't see how that can be flagged as a virus from onedrive

Header: {"_headers":{"cache-control":["private"],"transfer-encoding":["chunked"],"content-type":["text/html"],"p3p":["CP=\"ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI\""],"x-sharepointhealthscore":["1"],"docid":["tenant.sharepoint.com_29144f2e-4a17-4e99-9340-ebd8f83c3ea5_51ba236f-b0c7-4841-8b2e-85b7170946d6"],"x-aspnet-version":["4.0.30319"],"x-databoundary":["None"],"x-1dscollectorurl":["https://mobile.events.data.microsoft.com/OneCollector/1.0/"],"x-ariacollectorurl":["https://browser.pipe.aria.microsoft.com/Collector/3.0/"],"sprequestguid":["078f42a0-5064-1000-e699-8a5af2d73240"],"request-id":["078f42a0-5064-1000-e699-8a5af2d73240"],"ms-cv":["oEKPB2RQABDmmYpa8tcyQA.0"],"strict-transport-security":["max-age=31536000"],"x-frame-options":["SAMEORIGIN"],"content-security-policy":["frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com *.powerapps.com *.yammer.com *.officeapps.live.com *.office.com *.stream.azure-test.net *.microsoftstream.com *.dynamics.com *.microsoft.com;"],"x-powered-by":["ASP.NET"],"microsoftsharepointteamservices":["16.0.0.22511"],"x-content-type-options":["nosniff"],"x-ms-invokeapp":["1; RequireReadOnly"],"x-cache":["CONFIG_NOCACHE"],"x-msedge-ref":["Ref A: 4D11FDEFA37A490BBD6BC40DE9504331 Ref B: CH1EDGE1913 Ref C: 2022-05-30T20:58:47Z"],"date":["Mon, 30 May 2022 20:58:47 GMT"],"connection":["close"]}}
Request: GET https://graph.microsoft.com/v1.0/drives/b!Lk8UKRdKmU6TQOvY-Dw-pYg7b2D92Z9NpGAfXzD5ZItS81wlVpdaRoKbMoL0UroZ/root:/Apps/Joplin/024e09b630f54765b7db915c8c4f9f8f.md:/content null null {"headers":{"Authorization":"bearer eyJ0eXAiOiJKV1QiLCJub25jZSI6IjlNQ0hjR0hxSjZoWHhXSmhXRlQtelZFXzFaSlBvZjNodmliZDA3SDNFUTgiLCJhbGciOiJSUzI1NiIsIng1dCI6ImpTMVhvMU9XRGpfNTJ2YndHTmd2UU8yVnpNYyIsImtpZCI6ImpTMVhvMU9XRGpfNTJ2YndHTmd2UU8yVnpNYyJ9.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
Error: Malware detected
    at OneDriveApi.oneDriveErrorResponseToError (C:\Users\user\AppData\Local\Programs\Joplin\resources\app.asar\node_modules\@joplin\lib\onedrive-api.js:125:28)
    at OneDriveApi.<anonymous> (C:\Users\user\AppData\Local\Programs\Joplin\resources\app.asar\node_modules\@joplin\lib\onedrive-api.js:307:40)
    at Generator.next (<anonymous>)
    at fulfilled (C:\Users\user\AppData\Local\Programs\Joplin\resources\app.asar\node_modules\@joplin\lib\onedrive-api.js:5:58)
    at processTicksAndRejections (internal/process/task_queues.js:95:5)"
2022-05-30 15:58:48: Synchronizer: "Sync: finished: Synchronisation finished [1653944324136]"
2022-05-30 15:58:48: Synchronizer: "Operations completed: "
2022-05-30 15:58:48: Synchronizer: "Total folders: 50"
2022-05-30 15:58:48: Synchronizer: "Total notes: 132"
2022-05-30 15:58:48: Synchronizer: "Total resources: 26"
2022-05-30 15:58:48: Synchronizer: "There was some errors:"
2022-05-30 15:58:48: Synchronizer: "Error: Malware detected
Code: malwareDetected
Header: {"_headers":{"cache-control":["private"],"transfer-encoding":["chunked"],"content-type":["text/html"],"p3p":["CP=\"ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI\""],"x-sharepointhealthscore":["1"],"docid":["tenant.sharepoint.com_29144f2e-4a17-4e99-9340-ebd8f83c3ea5_51ba236f-b0c7-4841-8b2e-85b7170946d6"],"x-aspnet-version":["4.0.30319"],"x-databoundary":["None"],"x-1dscollectorurl":["https://mobile.events.data.microsoft.com/OneCollector/1.0/"],"x-ariacollectorurl":["https://browser.pipe.aria.microsoft.com/Collector/3.0/"],"sprequestguid":["078f42a0-5064-1000-e699-8a5af2d73240"],"request-id":["078f42a0-5064-1000-e699-8a5af2d73240"],"ms-cv":["oEKPB2RQABDmmYpa8tcyQA.0"],"strict-transport-security":["max-age=31536000"],"x-frame-options":["SAMEORIGIN"],"content-security-policy":["frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com *.powerapps.com *.yammer.com *.officeapps.live.com *.office.com *.stream.azure-test.net *.microsoftstream.com *.dynamics.com *.microsoft.com;"],"x-powered-by":["ASP.NET"],"microsoftsharepointteamservices":["16.0.0.22511"],"x-content-type-options":["nosniff"],"x-ms-invokeapp":["1; RequireReadOnly"],"x-cache":["CONFIG_NOCACHE"],"x-msedge-ref":["Ref A: 4D11FDEFA37A490BBD6BC40DE9504331 Ref B: CH1EDGE1913 Ref C: 2022-05-30T20:58:47Z"],"date":["Mon, 30 May 2022 20:58:47 GMT"],"connection":["close"]}}
Request: GET https://graph.microsoft.com/v1.0/drives/b!Lk8UKRdKmU6TQOvY-Dw-pYg7b2D92Z9NpGAfXzD5ZItS81wlVpdaRoKbMoL0UroZ/root:/Apps/Joplin/024e09b630f54765b7db915c8c4f9f8f.md:/content null null {"headers":{"Authorization":"bearer eyJ0eXAiOiJKV1QiLCJub25jZSI6IjlNQ0hjR0hxSjZoWHhXSmhXRlQtelZFXzFaSlBvZjNodmliZDA3SDNFUTgiLCJhbGciOiJSUzI1NiIsIng1dCI6ImpTMVhvMU9XRGpfNTJ2YndHTmd2UU8yVnpNYyIsImtpZCI6ImpTMVhvMU9XRGpfNTJ2YndHTmd2UU8yVnpNYyJ9.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
Error: Malware detected
    at OneDriveApi.oneDriveErrorResponseToError (C:\Users\user\AppData\Local\Programs\Joplin\resources\app.asar\node_modules\@joplin\lib\onedrive-api.js:125:28)
    at OneDriveApi.<anonymous> (C:\Users\user\AppData\Local\Programs\Joplin\resources\app.asar\node_modules\@joplin\lib\onedrive-api.js:307:40)
    at Generator.next (<anonymous>)
    at fulfilled (C:\Users\user\AppData\Local\Programs\Joplin\resources\app.asar\node_modules\@joplin\lib\onedrive-api.js:5:58)
    at processTicksAndRejections (internal/process/task_queues.js:95:5)"
2022-05-30 15:58:49: "DecryptionWorker: cannot start because no master key is currently loaded."
2022-05-30 16:00:40: RevisionService: "maintenance: Starting..."
2022-05-30 16:00:40: RevisionService: "maintenance: Service is enabled"
2022-05-30 16:00:40: RevisionService: "collectRevisions: Created revisions for 0 notes"
2022-05-30 16:00:40: RevisionService: "maintenance: Done in 110ms"
2022-05-30 16:03:48: "Running background sync on timer..."
2022-05-30 16:03:48: "Preparing scheduled sync"
2022-05-30 16:03:48: "Starting scheduled sync"
2022-05-30 16:03:48: Synchronizer: "Sync: starting: Starting synchronisation to target 3... supportsAccurateTimestamp = false; supportsMultiPut = false [1653944628888]"
2022-05-30 16:03:48: Synchronizer: "Indexing resources..."
2022-05-30 16:03:48: "ResourceService::indexNoteResources: Start"
2022-05-30 16:03:49: "ResourceService::indexNoteResources: Completed"
2022-05-30 16:03:49: Synchronizer: "Sync target remote info:", "{"version_":3,"masterKeys_":[],"e2ee_":{"value":false,"updatedTime":0},"activeMasterKeyId_":{"value":"","updatedTime":0},"ppk_":{"value":null,"updatedTime":0}}"
2022-05-30 16:03:49: Synchronizer: "Sync target is already setup - checking it..."
2022-05-30 16:03:49: Synchronizer: "Sync target local info:", "{"version_":3,"masterKeys_":[],"e2ee_":{"value":false,"updatedTime":0},"activeMasterKeyId_":{"value":"","updatedTime":0},"ppk_":{"value":null,"updatedTime":0}}"
2022-05-30 16:03:52: Synchronizer: "Error: Malware detected
Code: malwareDetected

that is the section on the log file that generates when it tried to upload

4

Well it is definitely OneDrive reporting that error: Error responses - OneDrive API - OneDrive dev center | Microsoft Docs

The only joplin id I can see referenced is 024e09b630f54765b7db915c8c4f9f8f.
I would check to see what note that is to see if it offers any clues.

5

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.