Root Very interesting Triumph experience

[RolaAddict]

So this guy came to me with a MT that would turn on show the boot logo then after saying Virgin Mobile it just died.It wasn't rooted or anything so clean stock ROM.I thought either battery was shot or the processor was messing up cause I know if you overclock it too much that it will boot cycle.So I put in my charged battery and same issue.So I tried to go into polling mode to flash CWM recovery so I could save the guy's data and info but it wouldn't let me.So I tried to go into the stock recovery and same thing....a no go.

So after some time I tried it again (3 hrs later) and some how I got it to go into polling.So I went to flash the CWM recovery image to the phone next thing I know it freezes the overwrite then ALL the files on the phone disappeared.I was like WTF so I tried again after pulling the battery.I then noticed a read me file on the Mobile drive of the phone that has the splash.img and recovery.img.I scanned the file and it was a virus.So I deleted and was able to flash CWM no problem.I booted the phone and it came on.I unlocked the phone and when I went to check the apps and such on the phone the phone froze then shut off.

So then I was like I need to wipe this ROM cause there must be more viruses on the phone.So I go to CWM and for some reason I got the battery charging image when the phone is off and around the battery was a red circle.I didn't have the phone plugged up but showed as if I did with the battery moving up and down like on a charger.This was so weird.So I went to re-flash CWM and the read me file was back on there.So I deleted it again and flashed CWM no problem.

Now here is where things got crazy.I get into CWM easy and go to make a nandroid back up so I can save guy's stuff but then scan the back up with ESET.It was working then when it got to data it gave me an error code.I was like f it I'm wiping the data and reseting the phone.I go to do it then when it gets to data it freezes then shuts off.Everytime after that when I went into CWM I would get error can't mount system error can't mount SD card error can't mount data.I did all I could....tried to flash my nandroid back up and when it got to data it stopped half way thru saying can not complete.

So I went back to polling to erase and use my files I saved from my phone in the MT image file.When I went to delete I bricked the phone.lol.Now I can't turn it on or anything.This was a trial and error on the deleting of the files in the image file of the phone.:musicus:

 

[Chingling]

Well that is a dang interesting story. Poor guy. Though I wonder why the virus affected the phone, considering you detected it on your computer, which means it was a computer virus, not an Android virus...

 

[RolaAddict]

Well the phone has multiple drivers on it.The one that has your recovery.img can only be accessed thru polling on the phone.Then you have your main driver that houses the phone ROM itself.I feel it was on the ROM in an app and sending itself over to the driver that has the recovery.img cause it over wrote the CWM img after I flashed it the first time and replaced it with a battery charging image but with a red circle in the middle.

Plus I was using ESET which does android phone anti-virus.When I had a free mp3 program on my phone and saved in my nandroid back up when ESET scanned my SD card it found the app in the nandroid and said it was an ad ware app/virus which it was cause it would always pop up ads on my phone in the notifications.When I deleted it thru ESET it made the nandroid back up useless.

 

[thebryceee]

That IS interesting. Never heard anything like it before. As I'm aware of, these phones are pretty hard to brick.

 

[markzombie82]

Some one call the cdc!!!!!
Lol

 

[Tokens210]

some of the other things described are just plain weird, but i have seen the battery icon that shows charging while there's nothing plugged in with the red moto logo stuck ontop of it

happened to me twice when i accidentally choose reboot now after wiping my phone but before i installed my new rom and gapps

 

[markzombie82]

Correct me if I'm wrong but it wouldn't be that hard if an app using ginger break and inserting the su binary and not super user.apk could do this easily with the flash img. Command.
Which makes sense why they have been rolling out security updates.

 

[RolaAddict]

Well this one is bricked bricked cause I deleted all the files in the image folder and when I did the folder deleted automaticly.I had all the img files I needed from my phone saved and was going to put them on there instead of doing an overwrite of them.The virus kept overwriting the recovery.img when I got the phone to boot.The CWM recovery.img is 4.9 or 5 MB this one was only 3 MB and the stock recovery.img is 4.6 MB i think

 

[piper_]

What was the name of the virus ?
ESET was nod32 back in the day ( or NOD-ICE in 1987) was a good product in my windows day

 

[Tokens210]

Like I said I've had my phone act the same way without a virus three times actually but idk, for me the first time it happened was cause I put the wrong cwm recovery on, the second time was the correct cwm recovery, just had a download error I missed, third time was cause I wiped all data to flash a new rom and accidentally rebooted before installing the rom
Io

How would this virus ur saying be staying on the phone, if there's nothing hooked up, you said you wiped the phone and your in download mode which you said you also wiped

What would stop you from goin to like the newb proof stock triumph thread and just putting the correct files back on it

 

[NewUser0]

highly doubt it was a virus. probably just a false positive.

 

[rsevans64]

i saw a post on the forum sbout allowing the security udates come through i believe it was a couple of dev sugesting not to let them com through because it might be V/M way of preventing loading roms. i can t remember were it was "all things roott\' or just the forum. try doing a search or maybe contacting angent13 or phases about it sorry i could really be any help but if anyone cane the can, goodluck and just call in for a replacement

 

[RolaAddict]

Like I said I've had my phone act the same way without a virus three times actually but idk, for me the first time it happened was cause I put the wrong cwm recovery on, the second time was the correct cwm recovery, just had a download error I missed, third time was cause I wiped all data to flash a new rom and accidentally rebooted before installing the rom
Io

How would this virus ur saying be staying on the phone, if there's nothing hooked up, you said you wiped the phone and your in download mode which you said you also wiped

What would stop you from goin to like the newb proof stock triumph thread and just putting the correct files back on it

Can't fix it cause I can't go into download mode and computer only picks it up as a flash drive.Also got replacement phone and I flashed CWM no problem but when I go into it I get
E:Can't mount /cache/recovery/command
E:Can't mount /cache/recovery/log
E:Can't open /cache/recovery/log
E:Can't mount /cache/recovery/last_log
E:Can't open /cache/recovery/last_log

Any ideas?It's a new phone that hasn't been activated yet.

 

[marc12868]

Can't fix it cause I can't go into download mode and computer only picks it up as a flash drive.Also got replacement phone and I flashed CWM no problem but when I go into it I get
E:Can't mount /cache/recovery/command
E:Can't mount /cache/recovery/log
E:Can't open /cache/recovery/log
E:Can't mount /cache/recovery/last_log
E:Can't open /cache/recovery/last_log

Any ideas?It's a new phone that hasn't been activated yet.

That means nothing important. Everyones says that. Just go about your business with flashing a rom or what ever you want to do with CWMR, cuz that error won't affect anything .

 

[Tokens210]

Can't fix it cause I can't go into download mode and computer only picks it up as a flash drive.Also got replacement phone and I flashed CWM no problem but when I go into it I get
E:Can't mount /cache/recovery/command
E:Can't mount /cache/recovery/log
E:Can't open /cache/recovery/log
E:Can't mount /cache/recovery/last_log
E:Can't open /cache/recovery/last_log

Any ideas?It's a new phone that hasn't been activated yet.

I believe those are common, they come up everytime i load my CWM recovery, you can just ignore them


in download mode your phone should show up like a flash or removable media drive named MOBILE


when usb storage is enabled when the phone is on, atleast with a custom rom, itll appear as a cd drive and a removable disk drive

 

[RolaAddict]

What was the name of the virus ?
ESET was nod32 back in the day ( or NOD-ICE in 1987) was a good product in my windows day

Still is nod32 lol.And I can't remember I just deleted it.All I know is that is was a read me file on there.Also when I downloaded ziggy's froyocream sandwich ESET flagged it saying it had Android/Plankton.H trojan in the file

 

[RolaAddict]

I believe those are common, they come up everytime i load my CWM recovery, you can just ignore them


in download mode your phone should show up like a flash or removable media drive named MOBILE


when usb storage is enabled when the phone is on, atleast with a custom rom, itll appear as a cd drive and a removable disk drive

Well when I deleted all the files in the image folder of the MOBILE drive the drive switched to USB mass storage drive.It wouldn't let me add the files back it kept saying please insert disk.

 

[RolaAddict]

That means nothing important. Everyones says that. Just go about your business with flashing a rom or what ever you want to do with CWMR, cuz that error won't affect anything .

Thanks all I need to know.The reason I ask is cause on MY MT I never had that happen.Thought it might be an issue lol.

 

[Tokens210]

Well when I deleted all the files in the image folder of the MOBILE drive the drive switched to USB mass storage drive.It wouldn't let me add the files back it kept saying please insert disk.

im think im not understanding what your saying, download mode the phone isnt turn on fully, for usb storage mode the phone has to be turned on and running

if you deleted the MOBILE folder in download mode then you would have deleted the bootanimations.zip and splash.img which i believe would cause the phone to be unable to boot period which would make it unable to have usb storage mode turned on

 

[RolaAddict]

im think im not understanding what your saying, download mode the phone isnt turn on fully, for usb storage mode the phone has to be turned on and running

if you deleted the MOBILE folder in download mode then you would have deleted the bootanimations.zip and splash.img which i believe would cause the phone to be unable to boot period which would make it unable to have usb storage mode turned on

Yes it won't boot anymore cause of it but while it was still in download mode the polling was still on the phone screen but the computer read it as a USB mass storage drive cause my windows media popped up for me to sync music to the drive.

 

[Tokens210]

Yes it won't boot anymore cause of it but while it was still in download mode the polling was still on the phone screen but the computer read it as a USB mass storage drive cause my windows media popped up for me to sync music to the drive.

got ya lol, had me scratchin' my head for a minute lol, still seems strange to me that it decided to switch it up on ya mid-way thru


thats y earlier on i was saying you should just replace the files that should have been there

 

[RolaAddict]

got ya lol, had me scratchin' my head for a minute lol, still seems strange to me that it decided to switch it up on ya mid-way thru


thats y earlier on i was saying you should just replace the files that should have been there

Yea but I wanted to put it all fresh cause when I overwrote the recovery img it would get overwritten by the virus when I was able to boot the phone.figured if I deleted all the files in the image folder of MOBILE then I could start fresh and virus free but didn't work like that lol