SANDISK CONTAINS VIRUS, DUPLICATE AND GAIN ACCESS TO INTERNET + CHANGE MAPS TO SHORTCUTS

This is copied from support mail to sandisk

My mom bought a Sandisk Cruzer 16GB USB memory, I made a map called “BILDER” then copied the files to that location at the same time I explained for her how to copy files etc, when I went in to the flash drive the map was a shortcut, tried to open it without success, found that the “BILDER” location was in “E:/6975125/BILDER.EXE” notice 6975125, when I tried to ran “BILDER” it execute and the 6975125 Was visible for a second etc etc, and I notice that the virus copied itself to other memory sticks like the SD card from the camera and into the computer and tried to gain access to the internet. You can look up the virus on Google, its called backdoor:win32/ircbot.FY and backdoor:win32/sdbot.gen!A and I may think it can be called more then those 2 if I would run it on other computers. All maps on the drives is shortcut, no movies or mp3 files are infected its just maps, and the USB Telenor dongle doesn’t work anymore cause of that problem so i can’t use it for internet anymore, i can’t give you a printscreen cause im afraid of infected my main computer, and one more thing is that the “runclubsandisk” shows Turkish as the main language and that it just shows me banners inside the programs window.

the problem for me is to retrieve the picture cause the virus is easier to handle then missing pictures.

edit: Bought it in a trusted store in sweden called kjell and company  www.kjell.com

Sounds like a SPAM posting to me.

what do you mean “sounds like a SPAM to me” ?

"what do you mean “sounds like a SPAM to me”

An over the top claim with a link to a place selling something/stuff.

the site www.kjell.com is a known good store in sweden,  just look at http://sv.wikipedia.org/wiki/Kjell_%26_Company if you dont think that wikipedia is a scam site to or just search for " kjell och company + wikipedia ".

attach the picture belove, maybe its not banner, its offers, maybe that is what the club sandisk software inside the USB is for, showing offers nothing else, i dont know.

edit: i linked to wrong company and named it wrong, its clas ohlson www.clasohlson.se http://sv.wikipedia.org/wiki/Clas_Ohlson more known then kjell cause it was established 1918 in sweden.

No one has time to help me?

No one has time to help me?”

You said your  USB stick has a virus.  Take it somewhere to get it cleaned.  And have the owner(s) of the infected pc(s) get their machines disinfected also.

As for shortcuts verses files it sounds like someone clicked on the wrong option when copying the files.  No big deal.  Delete the shortcuts and recopy the files.

And the SecureAccess cruzers do have an option to save files to the Internet and an app to play games from the internet.  These are normal, not viruses.  And they are optional functions, not required ones.

You said your  USB stick has a virus.  Take it somewhere to get it cleaned.  And have the owner(s) of the infected pc(s) get their machines disinfected also.

Alpha

OK, so I have to pay someone to clean the usb flash drive when the virus was found in usb memory after it left the factory?.

As for shortcuts verses files it sounds like someone clicked on the wrong option when copying the files.  No big deal.  Delete the shortcuts and recopy the files.

The shortcut problem is caused of the virus and not me, the problem is that we cut-and-copy the files to the usb flash drive so there are gone, so its a BIG DEAL.

And the SecureAccess cruzers do have an option to save files to the Internet and an app to play games from the internet.  These are normal, not viruses.  And they are optional functions, not required ones.

Thats great, but beacuse the virus excecute before i ever had a chance to secure the files, i cant see how that would helpt me, do you?

Doesnt seem that you wanna help me nor care about my problem, the faulth lies that the virus was inside the USB flash drive from the beginning, it copy itself inside the computer and for some weird reason delete or hide the maps and make shortcuts of them, cause my 3G Dongle doesnt work anymore cause of that problem, nor the SD cards files are there of the same reason etc.





" OK, so I have to pay someone to clean the usb flash drive when the virus was found in usb memory after it left the factory?."

There are other options. Give it back to your mom and tell her it’s got a virus. Or return it to the store and tell them all their USB sticks have viruses and get your money back.

“_ The shortcut problem is caused of the virus and not me, the problem is that we cut-and-copy the files to the usb flash drive so there are gone, so its a BIG DEAL. _”

When you take the USB device in to be fixed/cleaned/returned make sure you bring with it 3 or more antivirus reports confirming the problem, simply saying there is one won’t help.  And a single report is insufficient as many AVs sometimes report False Positives so a single report showing a virus is inconclusive, but 2 out of 3 will convince them.  Also the virus will need to be named and the AV reports will do that.

" the faulth lies that the virus was inside the USB flash drive from the beginning,"

As for the device being infected after it left the factory, I suppose it’s possible but unlikely.  Especially if it was in a sealed plastic package when you got it from your mom.  If it was opened then the question is who opened it, and where.

And if the missing files are important to you I suggest you get professional help to recover them.  Ranting and raving isn’t going to fix the problem.  It may make you feel good but the files will still be missing.

BTW Have you clicked on the shortcuts?  Maybe the files are still on the pc or you used the option to upload them to the web.

I know that ranting and raving isnt going to fix the problem, it is the support on this forum that makes me mad.

And the package was sealed so the virus came from the factory, and it happens sometimes even if its not very often.

And get professional help cost moeny, i just think that the support is 0/10 for this kind of a problem, its not like i got wrong item or the USB was broken before i got to use it, its more then that.

See what sandisk support says, im not going to recommand this brand if this is how the handle a situation as this one.

and i have clicked on the shortcuts ofcourse im not 5 years old, i know how to use a computer etc, there was a map created that i explained several posts ago

and it happend to the 3g USB and SD card to, and  that i or someone else would be the reason to make that happen is more unlikely.

The drive did not have a virus on it from the factory. sandisk ships over 2 million products a day and if there was an issue where a virus was on a device the entire production shipment would have been affected which you would be seeing millions of these posts. 

The bottom line here is some computer you attached the drive to was infected. Format the drive and clean the computers. The sandisk drive nor the software on it are infected with any virus leaving the factory. 

no no no no and NO, the drive was in package and i opened it at my home and attached it to the computer, it did not have a virus, the viruse is a type that fits to USB drive cause it copy itselfs to other etc, dont call me a lier!

exactly that was on the computer you connected it to. look at the stats its that simple. if this came from the fatory there would be millions of reports not just you. 

i know, but i cant agree with you when i know there was no virus, you would act the same.

What AV are you running on the infected computer?  When was it last updated?  What does it report when you scan the hard drive?  What does it report when you scan the infected USB drive?  What other AVs have you run against these drives?

You keep saying the USB drive is infected but you have shown no proof of that, only your opinion based on what you think are the acts of a virus.  And while you are entitled to your opinion, facts are what are needed.

Isn’t it possible (and more logical) that there was a virus, possible sitting dormant on your computer (or your mother’s; I’m not really clear what you were saying) and it was initialized when you plugged in the Cruzer drive to the USB port?

From what I read on the backdoor:win32/ircbot.FY trojan is that is it commonly downloaded to a computer from the internet, or through a file transfer, then when a removable/portable drive (such as your Cruzer) is plugged into a USB port, it copies itself to the drive and lays in wait for that drive to be plugged into another computer. It then launches an autorun sequence which then infects this new host computer making it vunerable to all kinds of bad stuff.

It is commonly spread by the use of portable drives, but when you consider the fact that these drives are manufactured, assembled and packaged mostly by automatic machinery in a huge factory by the millions and rarely (if at all) touched by human hands, I’m sure you’ll agree the chance that one of these drives having this virus loaded on it at the factory is virtually impossible. Besides SanDisk, being the largest flash memory manufacturer in the world really wouldn’t have anything to gain and a whole lot to lose if what you imply were true.

Regardless though, any up-to-date A/V software and enabled firewall should have prevented and/or caught this nasty before it did any damage. Apparently, your computer was not as secure as it could/should have been.

Definitely some bad luck there, but at this point you have to concentrate on cleaning and restoring your system.