N900 virus_USBS(■╒ê. fle
 

Hey guys, I need help with my N900 device.

When I connect my N900 to a computer, specifically to my .sounds folder, all my songs are gone and all I can see is 1 file [USBS(■╒ê. fle] with 0kb. I have over a thousand songs and I don't know why it is not showing up. I tried to delete this file but it doesn't allow me to. I unplugged my N900 from the PC to check it the songs are really not existing. However, as I checked they are all there.
I just wanted to transfer some songs but I couldn't do so since they are gone when I'm connecting to the computer.

If you have ever encountered this before, can you please help me out? I've browsed over the internet and what they offer is to reformat my usb, but I don't know how it works with my N900 device. I am really hopeful that there would other way to solve my problem rather than reflashing/reformatting my device. I hope you can help me out.


You will see in the picture on how it looks like.

Re: N900 virus_USBS(■╒ê. fle
 

Flash.

(10 chars)

Re: N900 virus_USBS(■╒ê. fle
 

Thanks for your feedback. Will you please explain to me how to flash my device (excuse for my ignorance)?

Re: N900 virus_USBS(■╒ê. fle
 

what is that usb security program you have running ...where are the songs in my docs or a sd card? ..do you have access to any other files?

Re: N900 virus_USBS(■╒ê. fle
 

why would you say that?

Re: N900 virus_USBS(■╒ê. fle
 

I have USB Disk Security in my PC and no threats found. I also scanned my device with ESET Nod32 Antivirus, and it only showed an error in opening. See screenshot at the bottom.

I have no memory card attached in my device, so it should be the songs in my internal memory (my docs)

Re: N900 virus_USBS(■╒ê. fle
 

I just looked at it (usb security) can you shut it down? make sure it is not still running in the tray(area by the clock in win) and try again ..do you have any acess to my docs at all? if not were you ever able to see my docs with that machine?

Re: N900 virus_USBS(■╒ê. fle
 

Hello Mike. Did you mean the USB disk security, not the antivirus right? I did close the USB disk security (its no longer in the tray). I restarted my phone. And connected again my device to the PC and same problem with before.


I think I have another problem, I can no longer take pictures with my device,i got an error Memory not accessible, unable to save content. I was trying to a get a printscreen on my phones display. If you see the 1st screenshot, I also had the same file in my DCIM folder.

Per checking my available memory , I still have 7.54 gb available.

Re: N900 virus_USBS(■╒ê. fle
 

Here is any easy walk through of what you need to do ..just skip the second step

http://www.adminlinux.org/2010/04/no...-readonly.html

Re: N900 virus_USBS(■╒ê. fle
 

looking at this again its easy for me but may be not for someone without terminal experience

you need rootsh installed first of all

open terminal and type "root" hit enter

type "mount -o remount,rw /home/user/MyDocs" enter

type "df -h" enter

you will see something like this
"dev/mmcblk0p1 27.0G 1.3G 25.7G 5% /home/user/MyDocs"

type "umount /home/user/MyDocs/" enter

type "fsck.vfat /dev/mmcblk0p1" enter

if what you see in red here is different from what you have change it.

the last command may have to run several times until the point where you dont get any errors.

Then close terminal and reboot your phone.

Re: N900 virus_USBS(■╒ê. fle
 

Hello Mike. Thanks for that. I appreciate it. I followed the above steps.

Here is what i DID:

1. root
2. Nokia-N900:~# mount -o remount,rw/home/user/user/MyDocs
3. Nokia-N900:~# df -h
4. Nokia-N900:~# umount /home/user/MyDocs/

[I get an invalid argument after the 4th line ]

umount:cannoy umount /home/user/MyDocs : Invalid argument

Re: N900 virus_USBS(■╒ê. fle
 

I did notice also that mine is /dev/mmcblk0p2 2.0G 790.5M 1.1G 41% /hom

Re: N900 virus_USBS(■╒ê. fle
 

Hello Mike! I followed your suggestion. but I get an invalid argument on the 3rd step umount /home/user/MyDocs/

umount: cannot umount /home/user/MyDocs/

Re: N900 virus_USBS(■╒ê. fle
 

It looks like your N900 was fine from the start. It seems that it's your pc which is 'infected'. I would advise to stop using your N900 in mass storage mode like that for now. Clean your pc.

It's a pity that now it looks like your N900 is corrupt as well. In your shoes, i'd use Testdisk on N900 or install it in a linux live system, copy all your stuff across, and format MyDocs.

Re: N900 virus_USBS(■╒ê. fle
 

make sure when you type MyDocs you type it exactly as shown it is case sensitive

Re: N900 virus_USBS(■╒ê. fle
 

I did type MyDocs correctly. so many times. it still says an invalid argument.

I connected again my device to my PC and now the .sounds folder is gone.

Re: N900 virus_USBS(■╒ê. fle
 

@qhubekela, yes my device just worked fine last night, i was just taking pictures. Now today, I inserted my external devices in the pc (flash drive, external drive and my phone). I was transferring music into and out of the devices (except my phone, it was idle for awhile. I just kept my phone in Mass storage mode all the time, and afterwards when I checked my N900 folder in the .sounds folder, there I found that my songs are missing, and it does not show in the status bar that there were hidden objects.


And now when I reconnected again to the PC, the .sounds folder is gone.

I am really at a loss right now. I'm not a techy person, I have no idea about Testdisk on N900 or installing in a LINUX live system.

Help me please.

Re: N900 virus_USBS(■╒ê. fle
 

this is not right you should see 28.0g xxx xxxx /home/user/MyDocs

not /home

Re: N900 virus_USBS(■╒ê. fle
 

Hi Mike.

I restarted the process and this is what I see at the bottom part.

/dev/mmcb1k0p1 27.0G 19.5G 7.5G 72%/home/user/MyDocs

after that I did below:

1. Nokia-N900:~# umount /home/user/MyDocs and enter

after what showed is only this:

Nokia-N900:~#

2. next

I retyped Nokia-N900:~# umount /home/user/MyDocs and enter, that's when I get the same error cannout umount / home/user/MyDocs?: Invalid Argument

Re: N900 virus_USBS(■╒ê. fle
 

so after u mount you get
Nokia-N900:~#
yes?
then proceed with the next step

edit after umount you will not see anything just the prompt

Nokia-N900:~#

Re: N900 virus_USBS(■╒ê. fle
 

yes that is right. but I retyped the command again.
is it okay still???

Re: N900 virus_USBS(■╒ê. fle
 

reboot the phone and start again

Re: N900 virus_USBS(■╒ê. fle
 

hello Mike, i typed the next command, I get the below.

dosfsck 2.11, 12 Mar 2005, FAT32, LFN
/ .sounds/USBS(??\210,\000\000\000
Bad file name.
1) Drop file
2) Rename file
3) Auto-rename
4) Keep it
?


what should I do next?

Re: N900 virus_USBS(■╒ê. fle
 

Try with option 3 (auto rename)

Re: N900 virus_USBS(■╒ê. fle
 

I want to say delete it but Im not sure I think that may have been created by the that usb virus software you ran ..try auto rename

Re: N900 virus_USBS(■╒ê. fle
 

i typed 3 and enter and here is what happened

renamed to FSCK0000.001/.sounds/ss a key. to Bad file name.
1) Drop file
2) Rename file
3) Auto-rename
4) Keep it
?

what do i do next???

Re: N900 virus_USBS(■╒ê. fle
 

keep it
this should get you out of fsck
and back to a prompt
then type "mount -o remount,rw /home/user/MyDocs" enter
then "rm -rf /home/user/MyDocs/.sounds/FSCK0000.001" enter
then start again at umount

Re: N900 virus_USBS(■╒ê. fle
 

Hi guys,

I chose autorename on the above

it says

Renamed to FSCK000.002/.sounds "." is missing. Can't fix this yet./.sounds ".." is missing. Can't fix this yet. / .sound/FSCK000.001
Start cluster beyond limit (3994292467 < 442378). Truncating file.
/.sounds/FSCK0000.001
File size is 1847620457 bytes, cluster chain length is 0 bytes.
Truncating file to 0 bytes.
/.sounds/ot a boo.t d
Start cluster beyond limit (1987011694 > 442378). Truncating file.
/.sounds/FSCK0000.001
File size is 1701998624 bytes, cluster chain length is 0 bytes.
Truncating file to 0 bytes.
/.sounds/ot a boo.t d
Start cluster beyond limit (655360 > 44378). Truncating file.
Long filename fragment "20101217_011." found outside a LFN sequence.
(Maybe the start bit is missing on the last fragment)
1: Delete fragment
2: Leave it as it is.
3: Set start bit
?1
/DCIM/USBS???\203.\000\000
Bad file name
1) Drop file
2) Rename file
3) Auto-rename
4) Keep it
? 3
Renamed to FSCK0000.002
Reclaimed 298 unused clusters (19529728 bytes).
Free cluster summary wrong (123576 vs, reallu 123874)
1) Correct
2) Don't Correct
? 1
Leaving file system unchanged.
/dev/mmcblk0p1: 4360 files, 318503/442377 clusters


i typed the command again after, and it's the same error over and over again.

Re: N900 virus_USBS(■╒ê. fle
 

then type "mount -o remount,rw /home/user/MyDocs" enter
then "rm -rf /home/user/MyDocs/.sounds/FSCK0000.001" enter
then "rm -rf /home/user/MyDocs/DCIM/FSCK0000.002" enter
then start at umount

and dont use that antivirus program on your phone again

Re: N900 virus_USBS(■╒ê. fle
 

have you tried to download a LiveCD from ubuntu.com and booting with it and then accessing your N900 from there (like you would do in win), just to see if this would make a difference.

Just to check, then you will have a totally clean system, and when booting live you make no changes to your computer (windows)

Re: N900 virus_USBS(■╒ê. fle
 

Thanks Mike Fila. I followed your instructions. Should I reboot my device again? Does this mean that my device is clean again and that file is removed?
Is it the antivirus program or the USB security app that caused it?

Re: N900 virus_USBS(■╒ê. fle
 

the usb security app and antivirus ...did fsck come up clean? yes then reboot

Re: N900 virus_USBS(■╒ê. fle
 

It is not a matter of antivirus program. It is known w$ndoze virus, caused by security hole about autostart. It was fixed by microsoft in windows update few months ago (thus bug was known for many years, with 3rd party fixes available for ages - often for no charge, like Panda USB Vaccinate).

Anyway, it is *not* N900 "virus", nor Linux one (in any flavor). It just affect vfats, connected @ mass storage mode. You should take care about Your desktop PC (cause You don't want to spread virus on every pendrive / portable multimedia player / whatever mass storage vfat, do You?). Then, recreate whole /dev/mmcblk0p1 partition - Your files are gone already, so it doesn't matter - no sense in fsck'ing, You're damned to mkfs.

To prevent further infecting, I recommend using (legally, free of charge) vaccinate released by Panda on Your computer, and every pendrive etc. *except* - AFAIK it's most clever implementation of general idea .It disabled autostart on w$ndows @all - this is same for every vaccinate implementation - and it creates autostart file on mass storage device, corrupting it every possible way, starting by wrong file entry in partition database, ending on some voodoo. This ensure, that file is unremovable, thus impossible to being overwritten by virus - this autostart on mass storage is used only by bogus windows implementation, so it doesn't matter anyway.

You can also do the same for Your N900 vfat partition, although having my machines and pendrives protected (and not connecting my N900 in mass storage mode to unknown w$ndowses) I don't feel need to. Even still, having 'uber' corrupted file - even not important - on My Docs would made me feel uneasy.

/Estel

Re: N900 virus_USBS(■╒ê. fle
 

I don't know how to help but it is > just for info!

that happened to me too but not with my phone, it was my friend's micro sd card when i inserted it through a card reader to my pc my friend's sound files gone and my pc showed the same file you mentioned. I think this is something not good with your and my pc.

BTW I don't connect my N900 with usb , i use WinSCP (openssh)

Re: N900 virus_USBS(■╒ê. fle
 

Hi I tried again, fsck still showed the same error as before. :((

Re: N900 virus_USBS(■╒ê. fle
 

Hi! I've downloaded panda vaccine as advised. so you mean to say there is no more hope in removing the virus? What should I do? I can't really say the the files are gone because it can still be played in my device. It's just that it cannot be found when I tried mass storage mode with our PC. How to recreate whole /dev/mmcblk0p1 partition?

Re: N900 virus_USBS(■╒ê. fle
 

i had suggested getting a live linux system before. it is still the simplest way to recover. ubuntu was mentioned. u could also use knoppix. u don't need any special skills for this.

alternatively, u can (if u have wifi access to your n900 and ssh server on it) install winscp on pc, and grab your files from n900.

then u can format MyDocs on N900 (by opening file manager, and long-press the internal storage). after this u could transfer your files back via wifi.

until your computer is fixed it's a bad idea to use mass storage mode.

EDIT: u can also copy your files onto a memory card (if u have one big enough for your files). u can use Filebox to copy them, or XTerm. it's not difficult. mainly u need to use 'cp', 'ls', 'cd' and these are easy to use command explained on the wiki, http://wiki.maemo.org/Terminal#Using_the_terminal

Re: N900 virus_USBS(■╒ê. fle
 

I also say try a live cd.

GOTO http://www.ubuntu.com/download/ubuntu/download and get a 11.10, burn it to a CD or better use it with a usb pen drive (>=1GB), boot from CD or USB and try to access you N900 files in mass storage mode.

Re: N900 virus_USBS(■╒ê. fle
 

Thanks! I am now downloading ubuntu-11.10-desktop-i386.iso though I still don't know how to work through it. I have no cd rom drive, but have an external drive, is that ok? what do I need to do to use with a usbpen drive, does it mean that I will install it in my external drive? won't this be a problem with my windows system?

Re: N900 virus_USBS(■╒ê. fle
 

there is a guide on the page that you downloaded it from, scroll down and select install from USB & windows and "Show me how", it is really simple, and as long as you don't begin an install process after booting from usb or USB HDD, then no changes to you system will be made.

This is also a good way to establish a VERY SAFE connection to home banking and so on.