Frage zur Meldung Virenfund vom Hoster

[Mark]

Ich bekomme in letzter Zeit immer Meldungen von meinem Hoster über einen angeblichen Virenfund beim Upload einiger Meteohub-Dateien.
Meldung wie folgt: Achtung - Upload einer Datei wegen Virenfund automatisch abgebrochen!
Da werden immer tmp. Dateien hochgeladen. Wie kann ich das ändern? Ich versuche es mal mit einem Neustart des Systems
upload/all-sensors.xml.tmp oder auch die clientraw.txt.tmp

[birdfeedr]

[google translation]Question for reporting virus detected by the hoster

I get lately are messages from my host about a supposed virus is found in some Meteohub upload files.
Message as follows: Attention - aborted due to automatically upload a file virus is detected!
As always tmp. Uploaded files. How can I change this? I try to use a system reboot
upload/all-sensors.xml.tmp oder auch die clientraw.txt.tmp upload / all-sensors.xml.tmp or the clientraw.txt.tmp

I think it is a false positive. Host is detecting a virus when there is none there. To verify, try to upload the file to another location where the file can be scanned with a different virus scanner, or open the file with a text editor to view the contents and ensure the entire file is only text.

You should contact tech support for your host and let them know directly.

[Mark]

Thank you for your answer!

I get the only following announcement.

Dear customer, dear customer,

just was rejected the attempt to transfer the following file on your account by FTP, from the virus protection system of our server:
/..../..../home/www/..../..../all-sensors.xml.tmp

In the called file the following virus was discovered:


Hence, the file was not transferred on your account. The possible other files which became upload are not concerned from this. We urgently recommend you the check of the abovementioned file on a virus infestation.

[admin]

Hi, I would recommend to change the hoster, they seem to be clueless.
It is hard to believe that there is a virus inside the generated XML file
Its is a plain xml-text file. Hard to embed a virus there

[birdfeedr]

From a google search for "xml virus"

As with any "file extension", however, it is very possible to rename an .exe to .xml (or whatever extension) and have an unsuspecting user double-click it. Add to this, any application which reads XML files is potentially carrying a defect which could allow arbitrary code to be run - again, this applies to any file format.

OK, worst case scenarios over.

A true XML file is not a virus threat. The XML file itself should be fully text-based and (in theory) only carry data and not executable content (binary content should be encoded into the ASCII character set using a supported XML encoding scheme - Base64, I believe, is typical).

Perhaps the virus alert is triggered by the double extension .xml.tmp The message that Mark reported did not include a description of the virus, so it's only a guess.