Hello Guys, I have a really big problem which I can't solve it.
Recently I bought a 2GB Micro SD card from someone and I attempt to format it but i'm receiving a message: "Windows was unable to complete the format".
Tryed to delete them but an error is occurring.
I did an AVG Antivirus, SuperAntiSpyware, Trojan Remover and STOPzilla! scan but i find three viruses:
-Worm/AutoRun.MB
-Worm/Brontok.EZ
-Klif Trojan
but its pointless since after I remove them, they reapear.
I've attempted to delete them with Unlocker but it requires to restart and after that they reapear again.
I've even Booted a Partition Manager an wipe/delete the partition on the card using all the 35 steps format it and it took me 4 hrs. but no use. They are still there.
And even formating my card on my other friend's phones/digital cameras and is no use. The files are still there.
The card contains 220MB of corrupted, cross-linked and virused files. I tried to scandisk it but after the scan and repair, the same exact files remained there. Its like the card has a secret reservoir which replaces back all the "bad" files.
Table of files:
Folders: GFS_TMP, IMF090~1, IMF090~2, IMF090~2, IMF090~3, WA1D5E~3, WA1D5E~2(these folders contain files with weird names like random characters and various sizes like 3,5GB), WapTemp, sryk, Videos, Imsifolder, nane, Images.
The next files are hidden and can be found in the parent folder(SD card). Files marked with invisible cannot be displayed when selecting to show hidden folders but the can be detected by antiviruses and winrar.
Files: EXPLORER.EXE, gptvqp.exe, m0vnonh.bat(invisible), jmyua.exe(invisible), pwia.exe(invisible), SPOOLSV.EXE, tfs4_160.ess, THUMBS.DB and some music files.
Please provide some links with good solutions and thank you.
P.S. Sorry if my English is bad. I'm a Romanian.
Have you tried booting from a Live CD and formatting and partitioning that way?
Its simple theory!
Your computer has virus. They aren't allowing to format your SD Card since they are running. Even if you format, they will again copy to SD Card. Virus intensity is to spread were ever possible.
First clean up your PC and then attempt to format SD Card. There are 99% possibility for virus to spread, even though you clean your pc and anti virus software are useless.
If viruses on your pc has covered totally all folders and drives, linux is the only way to clear them. If you fresh install Windows and then enter into some folders on other drives or SD Card and if it does contain virus, It gets active again and within sec its spread out (First to startup).
1. Fresh install windows and when it finishes, install good anti virus and start to scan all the other drives. DON'T ATTEMPT TO ENTER ANY OTHER DRIVES OR SD CARD. Good to disable autorun of drives.
2. Use live linux OS and enter to each and every folders and remove the unknown files which you guess as virus.
3. Same as above but in windows using dos (Not explorer).
Thats my experience.
Softwares are good unless the virus aren't on your PC. They stop viruses to enter your pc but cannot if its already exists in your pc. Cancer is the another name of virus.
Thanks...
Best Regards
TheOtis said:
Have you tried booting from a Live CD and formatting and partitioning that way?
Click to expand...
Click to collapse
yes, i tried, but linux says that my files are marked as locked, read-only, or write-protrected. and i don't know how to remove them.
CRACING said:
Its simple theory!
Your computer has virus. They aren't allowing to format your SD Card since they are running. Even if you format, they will again copy to SD Card. Virus intensity is to spread were ever possible.
First clean up your PC and then attempt to format SD Card. There are 99% possibility for virus to spread, even though you clean your pc and anti virus software are useless.
If viruses on your pc has covered totally all folders and drives, linux is the only way to clear them. If you fresh install Windows and then enter into some folders on other drives or SD Card and if it does contain virus, It gets active again and within sec its spread out (First to startup).
1. Fresh install windows and when it finishes, install good anti virus and start to scan all the other drives. DON'T ATTEMPT TO ENTER ANY OTHER DRIVES OR SD CARD. Good to disable autorun of drives.
2. Use live linux OS and enter to each and every folders and remove the unknown files which you guess as virus.
3. Same as above but in windows using dos (Not explorer).
Thats my experience.
Softwares are good unless the virus aren't on your PC. They stop viruses to enter your pc but cannot if its already exists in your pc. Cancer is the another name of virus.
Thanks...
Best Regards
Click to expand...
Click to collapse
i don't think is a virus sneaking in my pc since i tried formating it on other mobile phones and failed and if a virus was doing that, msconfig would surely notify me.
alexceltare2 said:
i don't think is a virus sneaking in my pc since i tried formating it on other mobile phones and failed and if a virus was doing that, msconfig would surely notify me.
Click to expand...
Click to collapse
Oh, As you said on first post. I though you are able to format.
If it doesn't format on mobile phone also, then probably the card is damaged. Either due to virus has made your card as readonly.
CRACING said:
Either due to virus has made your card as readonly.
Click to expand...
Click to collapse
Maybe, but could you come with a solution ?
alexceltare2 said:
Maybe, but could you come with a solution ?
Click to expand...
Click to collapse
If you can successfully format the cab and viruses reappear, then its coming from pc itself.
Try formatting on safe mode or live linux or mac.
believe me, i've tryed, but everything i did was like nothing happened(delete partition, format, wipe...) and someone in 'tech support guy' forum said it might be a virus hidding in the nand sector.
P.S. Sorry for the spam.
Related
Help please. All my data get lost!
I know the data on the card, but just cannot see them.
From checking the property of datacard, i know that all the data still on it. however, after open the card, just 2 files which i never know, all the others gone.
Don't know what my trinity did on my datacard wile i using the bluetooth internet sharing with my pc. After that, this happened.
All 1.4GB data disappeared!
Please, anyone can help?
Solution on #3
Would you care to let us know what the problem was? You might help others...
oVan said:
Would you care to let us know what the problem was? You might help others...
Click to expand...
Click to collapse
sure, it's my pleasure to help others here.
I use wm6 with a 4GB MINI SDHC(Karmba 4.0). After i use bluetooth internet sharing with my laptop, i found that all 1.4GB data disapeared from my sd card. Instead of them, i saw 3 files which have strage name on them and cannot be opened. All these files are 0byte. Then i insert sd into my laptop, right click sd to check property, i knew all data still on sd card, because the property of sd card shows "1.4GB used". After that, i enable my laptop to see hiden files, not see anything from sd card again.
Finnally, i found a tool called "Final recovery". This tool bring the most of files back to me, not all of them.
I suppose, the internet sharing write all the internet temp files into my sd card, then all my data had been overwrited. So, even when i use recovery tool, cannot recover all of them.
Karmba 4.0 set internet cache and temp folder in the sd card by default(Karmba 4.1 maybe does the same thing). Thus, i think maybe this is where the problem comes from.
By the way, i really appreciate what Karmba did for all the user here. His rom is quite good, But i think 1.2 is the best one. The others really need debug.
Hope this information can help other people who have the same problem. Cheers.
It's nice for you to share about your experience regarding recovery.
However, I think it's worthy to point out that SD corruption could be caused by almost any program that access the card. It has been discussed many times in the forum.
It's actually a HTC bug, which goes unfixed. Artemis got a fix to its SD driver long time ago.... Anyway, prevention in my opinion is far better than recovery. Look for a program called "sdsentry" and it will notify you when the corruption occurs and allows you to reboot the machine to prevent the corrupted FAT image got written to the card itself. It will save your day. Try it.
Hey Everyone,
Last night all my programs that Installed on my storage cards just stopped working. I had this happen to me before but all I had to do is restart the phone or just pull the microsd out and put it back in. But this time isn't the case. The message I am getting is " The file "what ever program i am opening" cannot be opened. Either it is not signed with a trusted certificate, or one of its components cannot be found. If the problem persist, try reinstalling or restoring this file." I have tried to reinstall the programs but it just says unsuccessful. Or when I install a program it would open until I soft rest and the program wont work again. I looked in my storage cards program files and there aren't any files in the folder.
Anyone have any ideas?
torint said:
Hey Everyone,
Last night all my programs that Installed on my storage cards just stopped working. I had this happen to me before but all I had to do is restart the phone or just pull the microsd out and put it back in. But this time isn't the case. The message I am getting is " The file "what ever program i am opening" cannot be opened. Either it is not signed with a trusted certificate, or one of its components cannot be found. If the problem persist, try reinstalling or restoring this file." I have tried to reinstall the programs but it just says unsuccessful. Or when I install a program it would open until I soft rest and the program wont work again. I looked in my storage cards program files and there aren't any files in the folder.
Anyone have any ideas?
Click to expand...
Click to collapse
Have you tried saving everything from your SD card and then reformatting the card and reinstall the programs?
torint said:
Hey Everyone,
Last night all my programs that Installed on my storage cards just stopped working. I had this happen to me before but all I had to do is restart the phone or just pull the microsd out and put it back in. But this time isn't the case. The message I am getting is " The file "what ever program i am opening" cannot be opened. Either it is not signed with a trusted certificate, or one of its components cannot be found. If the problem persist, try reinstalling or restoring this file." I have tried to reinstall the programs but it just says unsuccessful. Or when I install a program it would open until I soft rest and the program wont work again. I looked in my storage cards program files and there aren't any files in the folder.
Anyone have any ideas?
Click to expand...
Click to collapse
Is there an "application data" folder at the root of your storage card? Anything in there now? It has identical function to the one on your phone in the /Windows folder, just for apps installed on the card. If that's empty too, you can try backing up the card and reformatting, but it's sounding like your SD card is corrupt. This can happen if you accidentally unplug the USB cable from the phone when it's in the middle of a write cycle with the card.
sirphunkee said:
Is there an "application data" folder at the root of your storage card? Anything in there now? It has identical function to the one on your phone in the /Windows folder, just for apps installed on the card. If that's empty too, you can try backing up the card and reformatting, but it's sounding like your SD card is corrupt. This can happen if you accidentally unplug the USB cable from the phone when it's in the middle of a write cycle with the card.
Click to expand...
Click to collapse
only thing there is google maps but my google maps doesn't even open up. I will try backing up my data and and reformatting it. I'll post the results.
torint said:
only thing there is google maps but my google maps doesn't even open up. I will try backing up my data and and reformatting it. I'll post the results.
Click to expand...
Click to collapse
Google Maps has application data on your SD card? Had you intentionally moved it over there? I didn't even realize you could
sirphunkee said:
Google Maps has application data on your SD card? Had you intentionally moved it over there? I didn't even realize you could
Click to expand...
Click to collapse
no i installed it to my storage card.
But either way I can't installl google maps it wont let me and some other apps so i guess ill have to do a hard reset. I reinstalled some programs just not all.
torint said:
no i installed it to my storage card.
But either way I can't installl google maps it wont let me and some other apps so i guess ill have to do a hard reset. I reinstalled some programs just not all.
Click to expand...
Click to collapse
Hmmm, I thought google maps was preloaded on my (tmo US) stock 6.1 rom, but since I see it in my "remove programs" list, I guess I must have installed it when I first got the phone back in Nov.
Yeah, it's sounding like a hard reset is in your immediate future, let us know if that clears it up for you
sirphunkee said:
Hmmm, I thought google maps was preloaded on my (tmo US) stock 6.1 rom, but since I see it in my "remove programs" list, I guess I must have installed it when I first got the phone back in Nov.
Yeah, it's sounding like a hard reset is in your immediate future, let us know if that clears it up for you
Click to expand...
Click to collapse
oh it was preloaded but i downloaded it again from google. i installed it from google so i can get latitude.
torint said:
oh it was preloaded but i downloaded it again from google. i installed it from google so i can get latitude.
Click to expand...
Click to collapse
Ahh gotcha. Is that when this problem started, or did it work running off the SD card for a while?
sirphunkee said:
Ahh gotcha. Is that when this problem started, or did it work running off the SD card for a while?
Click to expand...
Click to collapse
oh its been working. google had nothing to do with it. i guess it was when i switched batteries and charged it. i didnt even plug it into my computer at all so i guess when i pulled the batter it corrupted the microsd some how
hey, op. It could be that the storage card folder somehow got renamed. That would cause all those links to be invalid. Check to see if the applications run if you click on the executables stored on the sd card.
This happens to me, but it's because the card is being used. So if this happens to you it probably only happens when you have it plugged in for Sync or File transfer. So just soft reset it any time you're done conecting it to the CPU
This method will work in windows for:
SD Cards in memory card readers/laptops
Phone set in memory card mode
HISTORY
Ok i ran into a wall with this one because of three reasons:
1. Laptops SD reader requires drivers to work, ok in windows useless in linux without the driver, so gpart and hirens boot cd out the window there.
2. My kaiser has a 6.1 rom on it and as far as i can remember it doesnt have a work as a memory stick option that appears on later roms like my touch pro had.
3. the touch pro has a broken digitiser and wont register my finger, so i can get the dam thing into usb memory stick mode.
So skip ahead if you dont want the long story of how i got it to work and made it a little easier for other.
Ok first job created a virtual pc with blank 8gb virtual disk and created the file system 1 x fat32 and 2 x ext2 partitions using hirens bootcd. Next i cloned the disk to a ghost32 compressed image file, as its only the file table and no files its really small (36K). So i rar'ed it up and uploaded so other people can use it as well. (5K)
HOW TO DO IT
Download my blank ghost image from :
Then you need ghost32.exe this can be extracted or ran from hirens bootcd and found as part of a Trialware download at Symantecs site: https://www4.symantec.com/Vrt/offer?a_id=32763 (you will need to create a login to download)
From there just run ghost32.exe and have your sd card ready and connected to the machine, be it in reader or a phone set in memory card mode. Select Disk from Image and select the image file on your hard disk. Then select the SD card and adjust the volume sizes as your require, it will complain about locking the drive and took an age on mine (2 mins), but eventually it was done from there just follow your droid guides for installing.
I know this doesnt help the vast amount of people, but if your stuck like i was and could get access to the card under windows and nothing else it works a treat. If however you can access it under dos etc, you may also want to use this way as its much faster than having to burn an ISO and reboot your entire PC just for partition an SD Card.
Hope this helps someone out.
PASSWORD: Android
http://www.megaupload.com/?d=D64ZX4ZH - 5K
Nice solution, I can see this coming in handy for many who may be in a similar situation.
plazma247 said:
HOW TO DO IT
Download my blank ghost image from :
http://rapidshare.com/files/404732241/Android-SD-Image.rar - 5K
Click to expand...
Click to collapse
Since it's only 5k, do you mind posting it here? The link has reached limit, 10 downloads.
Re-mirrored and added to the main post, lol ur lucky it was deleted from the main machine, tho the laptop still had the ghost image
Nice, but can you make one for 4gb sd card
Thanks.
plazma247 said:
Re-mirrored and added to the main post, lol ur lucky it was deleted from the main machine, tho the laptop still had the ghost image
Click to expand...
Click to collapse
Thank you! I'll try it out ..
Dude it will suit any size memory stick you can adjust the partition sizes as it writes them
plazma247 said:
Dude it will suit any size memory stick you can adjust the partition sizes as it writes them
Click to expand...
Click to collapse
gotcha *thumbs up*
Brilliant solution! One of those "Why did nobody think of this before" things.
When I conect phone to computer as Disk drive, all of my content on SD card is .exe files, even folders are .exe. So, I can not move anything to any computer. NOD32 reports that every file and folder are infected, but I cant delete or format card, becouse I need those data.
Can anyone help me with this?
Try cleaning them instead of deleting, also look at which virus is nod reporting that you have and google it for tutorials on how to remove it (this has worked for me always).
Give a try to the ms tool.
You can install Dr. Web (or lookout) from the market and scan your phone, and be sure to include archives and the memory card itself, although the virus is most likely on your pc.
And if this doesn't work try to backup the contents on some other device that is not running windows, it's also possible that the contents on the card are not actually infected (some viruses are bluffing and making nod go crazy or even disappear )
my phone has been infected with a shortcut virus. when i plugged and mounted USB to a PC all of my files in SD are all in shortcut. I had fixed that and it returned to normal. now when i go to music app . the music in music apps are all duplicates and when i click the duplicates it doesnt play but when i look at my SD card all of my music are not duplicates and the space of my SD card is just normal.
now i think that the internal memory of the phone is where the virus is located, as what happens to the pc the virus placed itself on the pc and when i plug some external drives the files in it turns into a shortcut. but the virus has been removed now using combofix on the pc. and now my problem is i dont know how to remove the virus on my phone. when i explore the internal memory or the root directory of my phone i saw that the sdcard,d folders are all in shortcut. and theres a one file "vendor" in shortcut too. when i try to delete it it comes back after. please help me
Hmm... do you have any Anti Virus software installed? If you can, try installing Avast! Antivirus and scan.
Otherwise, try a factory/hard reset.
Sent from my super rare, old Scroll Excel running Android 2.3 using the offical app.
LoopingCreeper said:
Hmm... do you have any Anti Virus software installed? If you can, try installing Zoner Antivirus and scan.
Otherwise, try a factory/hard reset.
Sent from my super rare, old Scroll Excel running Android 2.3 using the offical app.
Click to expand...
Click to collapse
i tried scanning with DR.WEB cause other and did not found anything. cause other antivirus software dont have the feature to scan the internal memory
The Problem is not on android
Hi trebla459,
The problem is not on your android device, so you have to clean your PC from virus first, try using PC Antivirus to clean them and make sure it is working to clean the shortcut in your PC. You can also try to clean them using 30-days free-trial antivirus if you don't have one.
After your PC all cleaned, plug your android on usb and scan it with your antivirus.
rsuresh agrees
There are several suggestions on beating it here: http://www.computing.net/answers/security/virus-shortcut-problems-on-my-flash-drive/39350.html
Seems like this is not the nastiest of viruses. Recent wave of cryptolocker is all around in the news. That has nothing to do with Android but I wonder if anything like this hits Android?
trebla459 said:
my phone has been infected with a shortcut virus. when i plugged and mounted USB to a PC all of my files in SD are all in shortcut. I had fixed that and it returned to normal. now when i go to music app . the music in music apps are all duplicates and when i click the duplicates it doesnt play but when i look at my SD card all of my music are not duplicates and the space of my SD card is just normal.
now i think that the internal memory of the phone is where the virus is located, as what happens to the pc the virus placed itself on the pc and when i plug some external drives the files in it turns into a shortcut. but the virus has been removed now using combofix on the pc. and now my problem is i dont know how to remove the virus on my phone. when i explore the internal memory or the root directory of my phone i saw that the sdcard,d folders are all in shortcut. and theres a one file "vendor" in shortcut too. when i try to delete it it comes back after. please help me
Click to expand...
Click to collapse
use an antivirus to scan, if you want to be radical, to make sure that the phone is clean, full flash erase format the memory card, and the phone, install new fresh rom
done
I have a similar issue and that is that when I plug in a USB flashdrive or hdd, it makes a shortcut of the drive inside the drive and majority of files are hidden. I tested this three times with different flash drives. I also update CM overy two days and I have done full wipe before....
This is to inform everyone about a virus that known for almost a decades and still continue its threat to our PC's and past through USB Flash Drives... the Virus name are :
-krqvsfjxld.vbs
-mugen.vbs
This Virus are running through WSCRIPT.EXE... this is why that when we Use "Attrib -R -A -S -H [SourcePath]:\*.* /S /D" to our USB Flash Drive, Shortcuts is still remain...
HOW to Delete this Virus...
-Open TASK MANAGER and choose PROCESSES
-Look for WSCRIPT.EXE and Click END TASK(For WinXP/Win7)
-Look for MICROSOFT WINDOWS BASED SCRIPT HOST and Click END TASK(For Win8)
-Open REGEDIT
-Press CTRL+F and type in "krqvsfjxld.vbs" or "mugen.vbs"
-then press Delete
-continue to look for those Virus until you delete all..
NOTE
-You will need to perform this in both ADMINISTRATOR and USER ACCOUNTS
-Make sure that WSCRIPT.EXE is not running in your PROCESSES
trebla459 said:
i tried scanning with DR.WEB cause other and did not found anything. cause other antivirus software dont have the feature to scan the internal memory
Click to expand...
Click to collapse
First, Malwarebytes searches internal storage and Dr. WEB is pretty bad.
Sent from my stock, untouched Samsung Galaxy Tab 3 7.0 on the xda-developers app