1. Download our Official Android App: Forums for Android!

Root Very interesting Triumph experience

Discussion in 'Android Devices' started by RolaAddict, May 6, 2012.

  1. RolaAddict

    RolaAddict Android Enthusiast
    Thread Starter
    Rank:
    None
    Points:
    93
    Posts:
    507
    Joined:
    Apr 26, 2012

    Apr 26, 2012
    507
    106
    93
    Male
    Electronics sales and repairs
    Virginia
    So this guy came to me with a MT that would turn on show the boot logo then after saying Virgin Mobile it just died.It wasn't rooted or anything so clean stock ROM.I thought either battery was shot or the processor was messing up cause I know if you overclock it too much that it will boot cycle.So I put in my charged battery and same issue.So I tried to go into polling mode to flash CWM recovery so I could save the guy's data and info but it wouldn't let me.So I tried to go into the stock recovery and same thing....a no go.

    So after some time I tried it again (3 hrs later) and some how I got it to go into polling.So I went to flash the CWM recovery image to the phone next thing I know it freezes the overwrite then ALL the files on the phone disappeared.I was like WTF so I tried again after pulling the battery.I then noticed a read me file on the Mobile drive of the phone that has the splash.img and recovery.img.I scanned the file and it was a virus.So I deleted and was able to flash CWM no problem.I booted the phone and it came on.I unlocked the phone and when I went to check the apps and such on the phone the phone froze then shut off.

    So then I was like I need to wipe this ROM cause there must be more viruses on the phone.So I go to CWM and for some reason I got the battery charging image when the phone is off and around the battery was a red circle.I didn't have the phone plugged up but showed as if I did with the battery moving up and down like on a charger.This was so weird.So I went to re-flash CWM and the read me file was back on there.So I deleted it again and flashed CWM no problem.

    Now here is where things got crazy.I get into CWM easy and go to make a nandroid back up so I can save guy's stuff but then scan the back up with ESET.It was working then when it got to data it gave me an error code.I was like f it I'm wiping the data and reseting the phone.I go to do it then when it gets to data it freezes then shuts off.Everytime after that when I went into CWM I would get error can't mount system error can't mount SD card error can't mount data.I did all I could....tried to flash my nandroid back up and when it got to data it stopped half way thru saying can not complete.

    So I went back to polling to erase and use my files I saved from my phone in the MT image file.When I went to delete I bricked the phone.lol.Now I can't turn it on or anything.This was a trial and error on the deleting of the files in the image file of the phone.:musicus:
     

    Advertisement

  2. Chingling

    Chingling Android Enthusiast
    Rank:
    None
    Points:
    53
    Posts:
    439
    Joined:
    Aug 28, 2011

    Aug 28, 2011
    439
    90
    53
    Nerd
    Antarctica
    Well that is a dang interesting story. Poor guy. Though I wonder why the virus affected the phone, considering you detected it on your computer, which means it was a computer virus, not an Android virus...
     
  3. RolaAddict

    RolaAddict Android Enthusiast
    Thread Starter
    Rank:
    None
    Points:
    93
    Posts:
    507
    Joined:
    Apr 26, 2012

    Apr 26, 2012
    507
    106
    93
    Male
    Electronics sales and repairs
    Virginia
    Well the phone has multiple drivers on it.The one that has your recovery.img can only be accessed thru polling on the phone.Then you have your main driver that houses the phone ROM itself.I feel it was on the ROM in an app and sending itself over to the driver that has the recovery.img cause it over wrote the CWM img after I flashed it the first time and replaced it with a battery charging image but with a red circle in the middle.

    Plus I was using ESET which does android phone anti-virus.When I had a free mp3 program on my phone and saved in my nandroid back up when ESET scanned my SD card it found the app in the nandroid and said it was an ad ware app/virus which it was cause it would always pop up ads on my phone in the notifications.When I deleted it thru ESET it made the nandroid back up useless.
     
  4. thebryceee

    thebryceee Android Expert
    Rank:
    None
    Points:
    143
    Posts:
    2,245
    Joined:
    Feb 28, 2012

    Feb 28, 2012
    2,245
    233
    143
    Male
    That IS interesting. Never heard anything like it before. As I'm aware of, these phones are pretty hard to brick.
     
  5. markzombie82

    markzombie82 Android Enthusiast
    Rank:
    None
    Points:
    43
    Posts:
    350
    Joined:
    Feb 19, 2012

    Feb 19, 2012
    350
    28
    43
    Some one call the cdc!!!!!
    Lol
     
  6. Tokens210

    Tokens210 Android Expert
    Rank:
    None
    Points:
    93
    Posts:
    849
    Joined:
    Apr 3, 2012

    Apr 3, 2012
    849
    182
    93
    Male
    General Contractor
    Clifton Heights, PA (Just Outside Philadelphia)
    some of the other things described are just plain weird, but i have seen the battery icon that shows charging while there's nothing plugged in with the red moto logo stuck ontop of it

    happened to me twice when i accidentally choose reboot now after wiping my phone but before i installed my new rom and gapps
     
  7. markzombie82

    markzombie82 Android Enthusiast
    Rank:
    None
    Points:
    43
    Posts:
    350
    Joined:
    Feb 19, 2012

    Feb 19, 2012
    350
    28
    43
    Correct me if I'm wrong but it wouldn't be that hard if an app using ginger break and inserting the su binary and not super user.apk could do this easily with the flash img. Command.
    Which makes sense why they have been rolling out security updates.
     
  8. RolaAddict

    RolaAddict Android Enthusiast
    Thread Starter
    Rank:
    None
    Points:
    93
    Posts:
    507
    Joined:
    Apr 26, 2012

    Apr 26, 2012
    507
    106
    93
    Male
    Electronics sales and repairs
    Virginia
    Well this one is bricked bricked cause I deleted all the files in the image folder and when I did the folder deleted automaticly.I had all the img files I needed from my phone saved and was going to put them on there instead of doing an overwrite of them.The virus kept overwriting the recovery.img when I got the phone to boot.The CWM recovery.img is 4.9 or 5 MB this one was only 3 MB and the stock recovery.img is 4.6 MB i think
     
  9. piper_

    piper_ Well-Known Member
    Rank:
    None
    Points:
    43
    Posts:
    237
    Joined:
    Oct 13, 2011

    Oct 13, 2011
    237
    45
    43
    What was the name of the virus ?
    ESET was nod32 back in the day ( or NOD-ICE in 1987) was a good product in my windows day
     
  10. Tokens210

    Tokens210 Android Expert
    Rank:
    None
    Points:
    93
    Posts:
    849
    Joined:
    Apr 3, 2012

    Apr 3, 2012
    849
    182
    93
    Male
    General Contractor
    Clifton Heights, PA (Just Outside Philadelphia)
    Like I said I've had my phone act the same way without a virus three times actually but idk, for me the first time it happened was cause I put the wrong cwm recovery on, the second time was the correct cwm recovery, just had a download error I missed, third time was cause I wiped all data to flash a new rom and accidentally rebooted before installing the rom
    Io

    How would this virus ur saying be staying on the phone, if there's nothing hooked up, you said you wiped the phone and your in download mode which you said you also wiped

    What would stop you from goin to like the newb proof stock triumph thread and just putting the correct files back on it
     
  11. NewUser0

    NewUser0 Member
    Rank:
    None
    Points:
    16
    Posts:
    45
    Joined:
    Sep 27, 2011

    Sep 27, 2011
    45
    6
    16
    highly doubt it was a virus. probably just a false positive.
     
  12. rsevans64

    rsevans64 Well-Known Member
    Rank:
    None
    Points:
    58
    Posts:
    105
    Joined:
    Aug 20, 2011

    Aug 20, 2011
    105
    12
    58
    Male
    Disabled
    southaven, ms
    i saw a post on the forum sbout allowing the security udates come through i believe it was a couple of dev sugesting not to let them com through because it might be V/M way of preventing loading roms. i can t remember were it was "all things roott\' or just the forum. try doing a search or maybe contacting angent13 or phases about it sorry i could really be any help but if anyone cane the can, goodluck and just call in for a replacement
     
  13. RolaAddict

    RolaAddict Android Enthusiast
    Thread Starter
    Rank:
    None
    Points:
    93
    Posts:
    507
    Joined:
    Apr 26, 2012

    Apr 26, 2012
    507
    106
    93
    Male
    Electronics sales and repairs
    Virginia
    Can't fix it cause I can't go into download mode and computer only picks it up as a flash drive.Also got replacement phone and I flashed CWM no problem but when I go into it I get
    E:Can't mount /cache/recovery/command
    E:Can't mount /cache/recovery/log
    E:Can't open /cache/recovery/log
    E:Can't mount /cache/recovery/last_log
    E:Can't open /cache/recovery/last_log

    Any ideas?It's a new phone that hasn't been activated yet.
     
  14. marc12868

    marc12868 Android Expert
    Rank:
    None
    Points:
    213
    Posts:
    2,460
    Joined:
    Oct 19, 2011

    Oct 19, 2011
    2,460
    850
    213
    Male
    Tier 2 Tech Support @ At&t
    Spokane Valley, Washington
    That means nothing important. Everyones says that. Just go about your business with flashing a rom or what ever you want to do with CWMR, cuz that error won't affect anything :).
     
    RolaAddict likes this.
  15. Tokens210

    Tokens210 Android Expert
    Rank:
    None
    Points:
    93
    Posts:
    849
    Joined:
    Apr 3, 2012

    Apr 3, 2012
    849
    182
    93
    Male
    General Contractor
    Clifton Heights, PA (Just Outside Philadelphia)

    I believe those are common, they come up everytime i load my CWM recovery, you can just ignore them


    in download mode your phone should show up like a flash or removable media drive named MOBILE


    when usb storage is enabled when the phone is on, atleast with a custom rom, itll appear as a cd drive and a removable disk drive
     
  16. RolaAddict

    RolaAddict Android Enthusiast
    Thread Starter
    Rank:
    None
    Points:
    93
    Posts:
    507
    Joined:
    Apr 26, 2012

    Apr 26, 2012
    507
    106
    93
    Male
    Electronics sales and repairs
    Virginia
    Still is nod32 lol.And I can't remember I just deleted it.All I know is that is was a read me file on there.Also when I downloaded ziggy's froyocream sandwich ESET flagged it saying it had Android/Plankton.H trojan in the file
     
  17. RolaAddict

    RolaAddict Android Enthusiast
    Thread Starter
    Rank:
    None
    Points:
    93
    Posts:
    507
    Joined:
    Apr 26, 2012

    Apr 26, 2012
    507
    106
    93
    Male
    Electronics sales and repairs
    Virginia
    Well when I deleted all the files in the image folder of the MOBILE drive the drive switched to USB mass storage drive.It wouldn't let me add the files back it kept saying please insert disk.
     
  18. RolaAddict

    RolaAddict Android Enthusiast
    Thread Starter
    Rank:
    None
    Points:
    93
    Posts:
    507
    Joined:
    Apr 26, 2012

    Apr 26, 2012
    507
    106
    93
    Male
    Electronics sales and repairs
    Virginia
    Thanks all I need to know.The reason I ask is cause on MY MT I never had that happen.Thought it might be an issue lol.
     
  19. Tokens210

    Tokens210 Android Expert
    Rank:
    None
    Points:
    93
    Posts:
    849
    Joined:
    Apr 3, 2012

    Apr 3, 2012
    849
    182
    93
    Male
    General Contractor
    Clifton Heights, PA (Just Outside Philadelphia)

    im think im not understanding what your saying, download mode the phone isnt turn on fully, for usb storage mode the phone has to be turned on and running

    if you deleted the MOBILE folder in download mode then you would have deleted the bootanimations.zip and splash.img which i believe would cause the phone to be unable to boot period which would make it unable to have usb storage mode turned on
     
  20. RolaAddict

    RolaAddict Android Enthusiast
    Thread Starter
    Rank:
    None
    Points:
    93
    Posts:
    507
    Joined:
    Apr 26, 2012

    Apr 26, 2012
    507
    106
    93
    Male
    Electronics sales and repairs
    Virginia
    Yes it won't boot anymore cause of it but while it was still in download mode the polling was still on the phone screen but the computer read it as a USB mass storage drive cause my windows media popped up for me to sync music to the drive.
     
  21. Tokens210

    Tokens210 Android Expert
    Rank:
    None
    Points:
    93
    Posts:
    849
    Joined:
    Apr 3, 2012

    Apr 3, 2012
    849
    182
    93
    Male
    General Contractor
    Clifton Heights, PA (Just Outside Philadelphia)

    got ya lol, had me scratchin' my head for a minute lol, still seems strange to me that it decided to switch it up on ya mid-way thru


    thats y earlier on i was saying you should just replace the files that should have been there
     
  22. RolaAddict

    RolaAddict Android Enthusiast
    Thread Starter
    Rank:
    None
    Points:
    93
    Posts:
    507
    Joined:
    Apr 26, 2012

    Apr 26, 2012
    507
    106
    93
    Male
    Electronics sales and repairs
    Virginia
    Yea but I wanted to put it all fresh cause when I overwrote the recovery img it would get overwritten by the virus when I was able to boot the phone.figured if I deleted all the files in the image folder of MOBILE then I could start fresh and virus free but didn't work like that lol
     

Share This Page

Loading...