About 2 months ago i got that "Crypto-virus" threw my Linux system on the only device attached to it at that time which was NOT encrypted. It was strange because i removed it with WinRar on my other offline machine which is windows. Typicly, i use and leave in a 64GB Mini SD card to store my actual documents inside of rather than the system so i can use it wearever. Even stranger is that it is one partition NOT divided into multiple partitions but it says in GParted it is overlaped? I have tryed all sort's of things and the files remain and are unchangable, the SD will not delete and when i try to it shows it is deleted untill i plug it back in else ware or hit refresh the whalla - its all back the way it was. This is driving me absolutly crazy, those cards are expensive and i need it for safty/security/versitility. That's the first half of this issue, the second is "IF" i can fix this some how i would like to encrypt the entire SD card to help better secure it as to not repeate this mess as easily again and TrueCrypt dose not do it aparently, any ideas?

(I have a 32GB PCMI card with 7 different Virtualbox virtual machines on it which is its sole purpose to store them and use them there i leave conected also i will be needing to some how encrypt also i could use some ideas on.)

Some quick sys spec's:
Custom rebuilt Panasonic Toughbook CF-30 Black Cobra
3 GB RAM
i386 (32 bit)
Debian Wheezy/sid Kernel: 3.5.0- 17- generic


I got this GParted error:



GParted 0.16.1 --enable-libparted-dmraid

Libparted 3.1
Check and repair file system (fat32) on /dev/sdc5 00:00:00 ( ERROR )

calibrate /dev/sdc5 00:00:00 ( SUCCESS )

path: /dev/sdc5
start: 2048
end: 124727295
size: 124725248 (59.47 GiB)
check file system on /dev/sdc5 for errors and (if possible) fix them 00:00:00 ( ERROR )

dosfsck -a -w -v /dev/sdc5

dosfsck 3.0.16 (01 Mar 2013)
dosfsck 3.0.16, 01 Mar 2013, FAT32, LFN
open: No such file or directory

========================================

I also got these 2 pictures:

https://www.dropbox.com/sh/0bdtlj3ix...nStBkYiBxcwNNa

Ranish used to be able to help in some cases for over lapping but it is always a gamble. In fact the data you have on it now is suspect.

Usually deleting all partitions and creating new ones will fix this issue.

Once you have this issue you have to fix it before you can move on to any other.

I would preferr to simply wipe it clean i have not lost anything on the card in data, i had backed it up and backed up the backup even. I am the kind of person to clone my disks not back them up, (i.e.: Windows backup is useless to me.) I am a PartedMagic user if that helps. I never heard of Ranish? I tryed deleting the partition, rebuilding the MBR and the entire SD is untouched after. Thanks.

Update:
I found this: http://www.rodsbooks.com/fixparts/
And it seem's like it could work but i am having an extreame headache understanding what to do and how to install it on Debian Wheezy. I don't know if any one can help with simplified instructions. I am still looking into the posibility of encrypting the SD card in question hear, all of this preferably on Linux. I expect that when i encrypt the SD card the data will be gone and i have prepaired a copy of the backed up data to replace already. I also read a Hexadecimal Editor can be used to manualy rebuild the partition, (epic headache there.) Not exactly sure how to go about any of this.

All this data is suspect so any backup or clone may be of no use.

You use some partition software. Depending on what you like or can use would determine. I'd assume fdisk or gdisk or gparted should be OK to remove all partitions and create new. Then install what you want. If your backup partitions are OK then after new partitons, partmagic should apply data correctly.

Some OS's and maybe some linux files could be fooled on this too. QNX isn't easy for example to correct partition sizes. Grub, fstab stuff may be an issue with this too.

I am not sure i understand what you mean by "all data is suspect" for sure, but if it is to imply that Crypto Virus infected it, it didn't have that chance nor is it conected to anything else. Yes, i was VERY suspect also and long before this issue. The clone was done long before the issue as well as the backed up backup, however the backup was destroyed by me as it was in fact suspect.

You say use a partition manager, i have used many and nothing will work. Its always the same situation, i insert the device, dismount it, use partitioning software alike to and some far better than GParted and it takes the time, typicly without error and shows it is erased then create a new MBR strip and format as a FAT32 (since it is a mini sd card) and all appears to go well then i plug it ino another machine to install full disk encryption but when the device opens all the data is there like it was never put threw partitioning software at all and untouched. Why? How? I am so confused.

Normaly i am pretty good with this sort of stuff but this specific issue has been driving me crazy. Its got to be fixable, but how?

Rather than fill up my Linux install with data i put it in that, my actual documents are there not in Linux so if i BORK my machine i loose nothing.

Just a dumb down biker guess that uses linux but it sounds like those files are set as read only.
I guess dd will not destroy them either?

Maybe a shredder of some sort? Shoot. I don't know. Just throwing out uneducated ideas.

Any idea's is better than no idea's, thanks.

Been thinking about dd and a hexadecimal editor but i never used a hexadecimal editor before - not once. As for dd i only used it a few times ever but to test a disk, the options were there but when i highlighted them then hit enter it asked to restart and i did... no effect.

I been thinking about that "Read Only" idea also but it did say a mis-alighnment of the partition was present. How do you misalighn a single partition that fills the entire disk, (except the recycled aria.) Makes less sence the more i think about it so i am thinking about this File Ownership & Rights Access and Settings" aspect more and more. I have done a lot of reaserch on it but there are verying methods and i have yet to figure it out also and would love to. I am going to do a search for this matter some more.

Again, thanks. (I wish i could mark or share a solution but i have yet to find it.)

Kinda not related but was something I ran into long ago.

The U3 software that came on Sandisk Cruzer USB Flash drives was very hard to remove for a time
because it was read only. Gparted would not remove it.

It took me using http://u3.sandisk.com/launchpadremoval.htm on a Windows Laptop to remove it.

Your problem sounds kinda the same. The U3 removal thing was finally figured in Linux though.

http://www.linuxquestions.org/questi...sb-4175495224/

Good Luck with it.

Any virus or any overlapping partitions make all the data unreliable. There is no way to be sure of any of it. When you have overlapping partitions your file structure is borked. You can't be sure of the files any more.

"nd all appears to go well then i plug it ino another machine to install full disk encryption but when the device opens all the data is there like it was never put threw partitioning software at all and untouched. Why? How? I am so confused."

Not sure I get the statement. I don't understand why you copy data and then try to encrypt it later on different system.

jefro:
I use Linux in a kinda uniue way i guess but i never keep anything on a PC i always keep items on external storage, (unless its there temporarily,) and often i plug the device into other machines i have as a go between also not just for the normal my documents file system. I prefer only one of my machines online. Its nice to have/use a seprate offline PC that can write the encryption for the 4-10 hours it takes and i don't turn that pc off any way because it is a server so i hope this helps. "Any virus or any overlapping partitions make all the data unreliable. There is no way to be sure of any of it. When you have overlapping partitions your file structure is borked. You can't be sure of the files any more." -OK, i get what your saying and don't even want that data its just a copy at the point it was borked any way."Not sure I get the statement. I don't understand why you copy data and then try to encrypt it later on different system." -Actualy i am trying to simply wipe the drive and i can safely replace the data but i want to encrypt the device before i copy it as before.

rokytnji:
"Kinda not related but was something I ran into long ago."_Actualy i think you got it via a whole other idea/example. Also, i use all ither sandisk or Western Digital. I use a Sandisk 64GB Mini SD card for this issue hear but my system is on a 64GB Sandisk Cruizer Fit Firebird USB disk wear i installed my Linux i didn't put it on my hard drive, instead i encrypted my hard drive as a digital data vault but on a Toughbook its literaly a vault and has a system specific conection with the hard drive inside a metal pandora's box with memory phome and a tempeture sensor.
Based on your input hear, i am gonna try these:
http://www.softpedia.com/progDownloa...ad-101424.html
http://hddguru.com/software/HDD-LLF-...l-Format-Tool/
I don't know how its gonna work but i'll be trying it asap and report back. Thanks.