Bienvenido! - Willkommen! - Welcome!

Bitácora Técnica de Tux&Cía., Santa Cruz de la Sierra, BO
Bitácora Central: Tux&Cía.
Bitácora de Información Avanzada: Tux&Cía.-Información
May the source be with you!
Showing posts with label USB fakes. Show all posts
Showing posts with label USB fakes. Show all posts

Tuesday, August 24, 2010

SpecTek Nand Flash

How To Decode Flash Storage Chips To Find True Capacity
Suspect that you have a counterfeit (fake) MP Player, USB Flash drive or Memory Card that has been digitally altered to report a larger capacity than it really is? Known as “Fakes” you will find them for sale on eBay, on wholesaler internet sites and even in small retail stores around the world.
Real flash chips from genuine manufacturers have been are upgraded (reprogrammed) to lie about their real size to operating systems.
SpecTek Nand Flash chips have been targeted by those who engage in this devious activity. Only when one exceeds the real capacity of the chip, does data loss begin. Buyers trying to find why the devices fail frequently take them apart to find out why they don’t hold the advertised capacity.
The first step is to try and decode the chip being used. If the brand is SpecTek you need to write down the information on the chip so you can find out what the real size is is.
The black market is busy changing the sizes of Flash nand chips with capacity of 512MB, 1GB, 2GB, 4GB and 8GB to report sizes from 4GB, 8GB, 16GB, 32GB, 60GB, 64GB, 120GB, 128GB, 240GB, 250GB, 260GB, 320GB, 360GB, 500GB, 512GB. 
So how can you find out the real size of the chip in your MP Player, USB Flash Drive or Memory Card?
SpecTek uses use coding, where each position in the chip’s serial identification has special meaning. The decoding chart is found at SpecTek.
For capacity storage sizing, Gb is Gigabits. 8 bits make a byte. So if you see 32Gb it is 32/8 = 4GB. Always divide by 8. GB is Gigabytes. Usually advertised sizes for storage use GB – Gigabytes. This is what consumers understand best for storage. It is very important to understand this difference when you consult a manufacturers decoder. If the ‘b’ is in lowercase they are referring to bits, not bytes as most everyone expects.
To use the SpecTek decoder:  
It contains the old part numbering system and the new one.
You can verify your results with  
If you confirm that you have a fake – a digitally altered storage chip, please report it to SpecTek and let them know that one of their chips has been reprogrammed into Frankenflash. 
The more information the genuine manufacturers receive the more it will help them to track and investigate.
If you have a digital camera, photograph the chip close up if you can so people can easily read the serial and also do one of the whole device. This is evidence you can submit in a legal claim or as additional information in a PayPal dispute issued for an eBay purchase.

F3

Linux H2testw Alternative Program Called F3 By Michel Machado
F3 by Michel Machado is an open source Linux software to test flash memory capacity. H2testw does nor run in Linux. There are two programmes, one to read and one to write files to the item being tested.
If you are a Linux user and need to test flash memory cards, usb flash drives and mp players. please try out F3.
Michel Machado:
F3 is an open-source, command-line implementation of my understanding of how H2testw works. I’ve only tested it on my Ubuntu / Linux desktop, but it should compile and work on other platforms with almost no changes. I’ve only tested USB sticks that I have, but F3 should work on wherever media that you have access to, including mp3 players, hard drivers, and RAM drivers.
F3 is composed of two binaries: f3write, and f3read. f3write fills a file system up with 1GB files named NNNN.fff, where N is a number. Whereas, f3read validates those files. If the content of all NNNN.fff files is valid, the memory is fine. The last file may be less than 1GB since f3write takes all available space for data.
Please visit http://oss.digirati.com.br/f3/ – F3 – an alternative to h2testw. Make sure to read Michel’s page and instructions.
Please leave feedback on the results of F3 here.
Currently F3 is in pilot and we would like to see how it performs for testing flash memory on the Linux platform. Linux users need a flash memory testing software, your input is needed.

Finding the fake of USB Flash Memory

Proving A Fake USB Flash Memory Pen Drive Stick Pen To Be False Capacity
A Fake usb flash drive, is a memory pen stick that has been digitally altered – reprogrammed to lie to an operating system about the real size of it’s flash nand storage chip. Once you exceed true capacity of the chip, you begin to loose files. People do not suspect the real reason, thinking it an error in the data transfer. Only when it happens again and again do they suspect there is something more… How can you find out if you have a fake usb flash drive?
Republished from InspectorTech’s http://fixfakeflash.wordpress.com/ site.
 In this guide you are taken through steps that can help you prove whether you have a fake. Evidence, testing results and photographs. A true case on a infamous fake flash seller is used. No, this eBay seller was not located in the Orient but in the United Kingdom!
The quick way to determine the real capacity of any flash chip used in usb flash drives, memory cards or MP Players is to use a free program called H2testw. The old fashioned way, is to take the item apart. Then decode the usb controller chip and the storage chip.
Usb controllers have a maximum range of flash chip sizes they can handle. Older controllers are especially vulnerable with flaws that can be exploited. These are easily be reprogrammed and manipulated using the right software tools to allow for the flash drive chip to be seen larger in capacity than it really is.
Nand flash storage chips can usually be decoded using their full serial information and searched on the internet. Brand name manufacturers have lists you can use to confirm the size of the chip by it’s serial information. If it is a very low quality or factory reject, you will will not find any brand name information (see Genuine Verses Fake Counterfeit USB Flash Drives – A Guide – USB Flash Chips Used In USB Flash Drives – Grades A B C D ). This discovery can be extremely useful to you, especially if the seller said it was a brand name such as SAMSUNG and it is not – more evidence.
FixFakeFlash has a category: Flash Chip Storage with articles for manufacturers of nand flash chips and includes the links to check the serial information.
When you have to confront a fake flash seller who does not accept the proven H2testw, you can prove it a additional information. The physical facts photographed. Opening suspected flash drives that fail H2testw, can help you corner fake flash sellers, even eBay, PayPal or any other internet site that offered them. Fake Flash sellers can not get past you with the “defective song”, when the actual flash drive chip shouts the truth about it’s real manufactured capacity! Here is a visual example based on a real case.
16GB USB Flash Drives Fakes Exposed
A UK eBay Seller, bigdawgbaker recently sold 16GB usb flash drives that turned out to be a fake, false capacity. He stubbornly insisted there was nothing wrong with his usb flash drives and refused the results of H2testw. SOSFakeFlash investigated him. bigdawgbaker is a reseller of fakes, worse then a fake flash seller. Additional background information is presented, because he sold what he bought from known fake flash sellers.
Victims are much sharper than most fraudsters think. This guide will to help you to become even sharper and arm you to deal with your fake flash seller.
bigdawgbaker bought 180359609665 from upcomingtrend (see upcomingtrend Ebay Fake Flash Seller Alert – China ). Note all models have been investigated since that alert by SOSFakeFlash and confirmed fake.
bigdawgbaker-16GBFake01-upcomingtrend
bigdawgbaker resold this usb flash drive to an eBay member. Notice the British Flag? And also the UK seller? Watch out for this. It is an attempt to make you believe that buying from a local eBay seller is safe. You as much at risk from a local seller as you are from one in the orient. After all, where are these items made?
The victim tested with H2testw and got this result from the recycled fake purchased from upcomingtrend and sold by bigdawgbaker:
Warning: Only 16183 of 16184 MByte tested.
The media is likely to be defective.
1.9 GByte OK (4073164 sectors)
13.8 GByte DATA LOST (29069620 sectors)
Details:0 KByte overwritten (0 sectors)
0 KByte slightly changed (< 8 bit/sector, 0 sectors)
13.8 GByte corrupted (29069620 sectors)
0 KByte aliased memory (0 sectors)
First error at offset: 0x000000000a5d9420
Expected: 0x9ec8e6e3d3718420
Found: 0x3d91cdc7a6e32420
H2testw version 1.3
Writing speed: 9.04 MByte/s
Reading speed: 10.3 MByte/s
H2testw v1.4
How did the seller respond in the PayPal case?
Seller: You can report this to sosfakeflash but he does not test any of the products I sell. That test you have done is not an industry standard and means nothing. No refund wil be forthcoming.
You could face this from a fake flash seller. We would say then, what is the industry standard? Is there one? The fact is, H2testw was commissioned by a famous computer magazine site, after they got caught in fake usb flash drives. They had a promotion on and the prize was? USB Pen stick flash drives. So you can imagine how they felt! The software is copyrighted, but is given free to everyone to use for testing. They recognized the problem and c’t Magazin für Computertechnik is providing an important service to people around the world in offering it. It is currently at version 1.4 created by Herald Bögeholz. Victims of fake flash devices are very fortunately that the site and author of the software offer it. Their contribution against this devious fraud is highly respected by the FrankenFlash project. In 19 months of operation the project can only say one thing, time and time again when flash drives are opened, they only confirm what H2testw reported!
bigdawgbaker also bought 320380627749, 320380627509 from ebay fake flash seller digitalting0303, now suspended by ebay, See (digitalting0303 Ebay Fake Flash Seller High Alert Devious – Hong Kong ) for the original line up of items sold by digitalting0303.
bigdawgbaker-16GBFake02-digitalting0303
When the first victim continued to challenge in the PayPal case, bigdawgbaker replied:
Seller: These are tested by me and show the correct storage.
Okay, exactly how? In any case another Another victim fell into his trap buying:
The testing results from H2testw:
The media is likely to be defective.
1.8 GByte OK (3972781 sectors)
13.7 GByte DATA LOST (28760403 sectors)
Details:3.1 GByte overwritten (6625269 sectors)
1.5 KByte slightly changed (< 8 bit/sector, 3 sectors)
10.5 GByte corrupted (22135131 sectors)
16 KByte aliased memory (32 sectors)
First error at offset: 0x0000000032c64200
Expected: 0x0000000032c64200
Found: 0×0000000032864200
H2testw version 1.3
Writing speed: 2.58 MByte/s
Reading speed: 4.79 MByte/s
H2testw v1.4
Recall that bigdawgbaker said:
These are tested by me and show the correct storage.
He never said what he tested with and he was very careful in his words. He said “show the correct storage“. The emphasis is on “show”. That is exactly what fake flash devices are supposed to do, show the wrong size. Have you believe in the advertised size.
The usb flash drive in our example is one of the oldest and most classic fakes sold on eBay. This victim took the usb flash drive apart and photographed everything in detail:
01-h2testbigdawg
His test results in action.
02-bigdawgcomputerproperties
Indeed the operating system shows 16GB. That is what a fake flash usb drive is supposed to do. Lie!
Here is the drive. In fact the victim reported it was the same shipping envelope used by the original fake flash seller digitalting0303. bigdawgbaker was not very bright and extremely cheap. More evidence.
The first step in opening this classic counterfeit.
05-bigdawgflash2-small
The usb flash drive disassembled. Note the pieces. You should always line up the parts in the order you take the drive apart to make it easier to put it back together again. The Pcb board in incased in the plastic shell at the right.
Notice the 16GB sticker on the outer leatherette case. These stickers are the most damning. You can put any sticker you like. Real usb flash drives don’t use such a cheap method to indicate size. This is the most important warning bell for anyone who buys a usb flash drive. If you bought one that has a sticker like this, test immediately! It does not matter what the memory pen stick looks like, TEST!
07-bigdawgflash4
This is the side with the storage chip. In some cases you will have a hand written size in the sticker. One of the oldest members in the FrankenFlash project has a jar full of fakes that had 2GB written on the stickers! You will notice that the victim chose not to remove the sticker to continue decoding the storage chip. The reason is evidence, or “patina” – potential prosecution in a court of law. The markings for the serial are very faint. Not a good sign. The chip is old and potentially substandard quality. Note that is was supposed to be a 16GB usb flash drive. There is only one chip. A one chip usb flash drive at 16GB is very recent technology and expensive! This usb flash drive sold for about £19.55, originally purchased from ebay fake flash seller digitalting0303 at £11.98. bigdawgbaker had almost a 100% markup!
08-bigdawgflash5
The other side of the board, shows the usb controller.
09-bigdawgflash6
a closer look at the usb controller chip.
09-bigdawgflash6-MW6208E
MW6208E 1PL 370761-4 09HT0325
MW6208E controller chip! This is one of the most manipulated sub controller chips! InspectorTech finds that this is one of the most popular search that brings people to the fixfakeflash site searching for help on how to repair fakes that have this controller! It is a fake flash reprogrammers favorite! If you find with Chipgenius that you have a usb flash drive with MW6208 or any variations – Start worrying! TEST! You have a very high probability that you bought a fake usb flash drive!

iflash and info of VID&PID

Download chipgenius, this program will automatically detect an inserted flash drive and read out the 4 digit VID code and 4 digit PID code.
http://www.mydigit.cn/mytool/ChipGenius.rar

http://www.flashboot.ru/index.php?name=iflash

Repairing Counterfeit Flash Drives

Source
About VID PID 
FixFakeFlash from SOSFakeFlash, explains steps to rescue a fake flash (counterfeit) drive. How you can try to return it to its true size. Wrestling with FrankenFlash drives to make them useful is a mystery to most victims of fake flash drive purchases. The information FixFakeFlash has for you comes from the efforts of fake flash victims who succeeded in repairing their drives.
Before you begin, please read:
Should You Repair A Fake USB Flash (Pen) Drive?

from TechChips. Update September 23th, 2009.
To repair counterfeit (fake) flash drives you need the VID and the PID for a flash drive. This will help you determine the software tool required to perform a low level reformatting (commonly known as reflashing). Reformatting in an operating system is “high level” and can not repair the drive. The controller on the flash drive has been reprogrammed to lie – this is why you normally need a special software tool. They exist and are available, but you need to know which one you must use for your drive.
The VID is the Vendor information, the PID is the flash chip controller information. The PID is supposed to identify the chip set family for a software reprogramming tool. How to find this information? The easiest way is to download a program called chipgenius – it will read the drive for you. Only if chipgenius does not find any useful information or the information does not match anything known on the internet should you consider taking your USB flash drive apart. Some drives do not come apart easily so avoid this unless you have no other choice. In most cases you will not have to consider doing this.
Update 20091023: Please consult the new FAQ at FixFakeFlash Inspectortech for important information on repairing fake flash memory items before you attempt to repair.
Follow these steps to begin the journey to fix and repair your fake USB flash drive to its real size:
Step 1 – Identify your flash drive VID and PID.
Step 2 – Find the Right software tool
Step 3 – Trouble Shooting – Understanding about VID’s and PID’s for Fake flash drives
Step 4 – Preparing to reprogramme your fake
Step 5 – Share your solution
Please be sure to read this entire article before you attempt to repair your fake flash USB drive, do not take short cuts.
Step 1 – Identify your flash drives VID and PID.
Download chipgenius, this program will automatically detect an inserted flash drive and read out the 4 digit VID code and 4 digit PID code.
Step 2 – Find the Right software tool
Once you have the VID and PID you can begin your search for a tool to fix your counterfeit flash drive and return it to its true size. In your journey to make your fake flash drive real, you need to be aware there is a risk of losing your drive if you use the wrong tool. It is a gamble. Many people win, restoring their flash drive, others loose. There is no 100% guarantee you will succeed. If you are stuck with a fake, there is no harm in trying. The Frankenflash drive is useless and dangerous to use, unless you can restore it to its true size.
You can search fixfakeflash.wordpress.com to see if there are any reported solutions that match for your VID, PID, vendor and product information – use the search box and the categories menu. You might be lucky – a solution already documented. You can also search SOSFakeflash.wordpress.com for information reported on VID AND PID, and the manufacturers.
SOSFakeFlash is the main site for discussion and sharing on ideas to fix fake USB flash drives at the moment. You may leave comments on the different solution posts at this site to share your repair experience.
This is the site we use most – they have been busy building a collection and it grows all the time:
If the file passes your virus scanning, you can now unpack the file. Continue to read the rest of this article before using the program.
Step 3 – Trouble Shooting – Understanding about VID’s and PID’s for Fake flash drives
The wrong VID and PID can cause an operating system not to recognize the flash drive as a USB device. It can also cause a computer to “Lock Up” – Freeze. In some cases the counterfeit reprogrammer is an armature and does not know how to use the tools properly. In other cases the fake flash reprogrammer switched to another batch of drives and forgot to reset the tool to the new VID and or PID. The software tool(s) will carry out the reprogramming of the drive but it will write the PID and VID as identified in the software tool he used. Because of this, you should research carefully based on the information provided by chipgenius. It is also why we want to do articles with VID and PID information to make it easier for you to succeed. As we have mentioned, if the wrong tool is used the drive will not be detected (good) or if manual selections are used the drive can be damaged (bad).
Even if the VID and PID are not exactly correct, if it is the same chip family (PID range) – it may still be possible to carry out the repair. Unfortunately when you do the repair the wrong VID and PID is carried over – not much of an issue as you only need to succeed in reflashing once.
In most cases the VID and PID for a fake flash drive is correct or good enough for your purposes.
If when using Chipgenius you didn’t find a match to hunt for the correct software to use, you still have an option – manually disassemble the drive if the model allows this. Do so with care. Locate the little black square chip on the drive – it is the flash chip controller. Read the beginning identification. For example:
AU6980
AU6983
MXT6208
MXT8208
If your drive is not glued to the bottom casing you can examine and record the flash drive chip too. This information is only useful after you find a tool you want to use. You can use the additional information of the existing chip to compare against what the tool identified your flash drive storage to be.
Step 4 – Preparing to reprogramme your fake
Make sure you wrote down the VID and PID information. You might want to compare it against what the tool reports in the manual setting. You might also like to revise the VID or PID to match what chipgenious reported if different from the tool (manual settings probably from the previous person who used the tool when they uploaded). It is very hard to say if you should revise the VID and PID if there is a difference. Our advice is to leave the settings alone, go “Auto”. If the results are bad, then redo the flashing with the settings chipgenious reported to see if there is an improvement. Inch your way to success.
If you took your drive apart and were able to identify the flash drive number (note this is not the little square controller chip we are talking about, but the flash chip where the data is stored), compare it against what the tool chose as the flash drive. If different still run the tool in “Auto”. If the results are bad, go back and select a manual mode, Look to find the flash drive chip listings. You might have to set a manual mode option to get the list activated. Scroll through the list to find your drive. If there, select it and run the tool again.
We strongly advise that you do not play with the many options available in some tools. It requires a lot of technical understanding. We are not technicians trained in flash drive chips – we don’t really know or understand the differences, so let the tool decide what to do with the defaults. After all, the object is only to return the drive to its real size and to lock out any bad sectors found. Bad sectors are not unusual – you will always have some. They exist on flash drives and hard drives. As most counterfeit flash drives are rejects for major brands do not be surprised to see the tool finding a lot of bad sectors. All that matters is that they are FOUND and locked out. If there are a lot of bad sectors expect the drive to shrink considerably much below what the real flash drive chip is supposed to hold in data. Again consider – better a little healthy drive then a large bad one you can not trust.
Do not play with any partitioning options and do not make the drive a local drive.
Run the tool with no other programs up and running. Let the tool have the full focus of your computer’s resources to get the job done.
Avoid rerunning a reflashing tool many times unless you have to. Tests we’ve carried out indicate that repeatedly rerunning a reflashing tool on a drive decreases its size. 
The reasons for this are not known. It is possible that flash chips do not like being “reburned”. Normally this is done once in a flash drive chip’s life – when it is being prepared at the factory. Flash chips are different in technology from hard drives. Only rerun a tool if you have to, not to practice or experiment.
Step 4 – Verifying the Results of Reflashing
Once the tool has completed, it should tell you the final size and also how many bad sectors found. You may or may not have to format the flash drive. It depends on the tool. If you need to format it, do so. If you are looking for ntfs formatting and don’t find it, there are reasons. Unless you need to store hugh video files (4GB+) there is no reason to do this. Flash drives as a rule are normally formatted as FAT and FAT32 by manufacturers. It is because this file system is the most compatible and understood by many different operating systems. The technology behind NTFS is very proprietary and specific to Microsoft Windows from Windows 2000 onward (XP, Vista).
See:
Reasons not to format a USB Flash Drive to the NTFS File System
If you really want NTFS you can read
Tips for USB pen drives
The information is for advanced computer users. If you aren’t comfortable with the information found at the site, don’t try out any of the ideas or information please. If you are comfortable still format to FAT or FAT32 like everybody else and of course do the test with H2testw 1.4 to prove you succeeded. You can always do your dare devil experiments to have NTFS formatting later.
Once you have reflashed the drive, don’t begin to use it to store data. You must TEST your efforts first to make sure you succeeded. This is important. You need to know the drive is now good and safe to use. Use the H2testw 1.4 programme. If you don’t have it please read:
H2testw 1.4 – Gold Standard In Detecting USB Counterfeit Drives
and download the software from the links provided.
If the program reports you have a good drive free of any errors, you have succeeded in restoring your FrankenFlash drive to a real flash drive.
Step 5 – Share your solution
If you used this article to help you succeed in returning your drive to its true size or a usable size, please document how you did it for your drive model. Share your solution to help others succeed too.
Repairing Counterfeit Flash Drives is a complex subject. No one magic solution exists to fix all drives. There are many flash drive models and chipsets. It grows every month. We’ve written this article to demonstrate the common principals and steps a person has to follow to succeed in making a fake flash drive real again.
Help your fellow fake flash victims – send your solution to:
SOSFakeFlashDrive@gmail.com
We need to know:
1) Chipset (i.e. AU6983, MXT6208 etc..
2) Vender (Alcor,AMECO,micov,iCreate)
3) VID
4) PID
5) Tool Used (name and url address to it if possible)
Optional
6) Where you bought the fake from (the store, internet site, eBay)
7) If eBay the seller id and the item number and your id (so we can try and find the listing) and present with an image if the drive if possible
8) The advertised size
9) Your repaired restored size
10) You steps, comments or anything else you would like to add
If you like you can choose a pen name, a nom de plume for yourself. It is fun and it is interesting too! All the information found at our sites comes from people sharing. Help others to climb out of the fake flash pit and at least get a flash drive they can use.

Flash memory falso y la seguridad de datos

Why Is Fake Flash Memory So Dangerous?
Fake Flash Memory is false capacity memory.
Flash nand memory chips have been reprogrammed to lie about their true capacity. They trick operating systems into believing they are bigger then they really are.
Once you exceed the real capacity of the memory chip, you will loose data and files. There is no place on the memory chip.
Fakes are created by reprogramming the flash memory chip with special software.
Certain usb flash controller chips have flaws.
Fake Flash Memory sellers always seem to use the same chip sets.
Products affected are usb flash drives, MPx players and memory cards.
A strong indicator of a fake, is the price paid. See Global Report – eBay Fake Memory 2008 – 2009
To make sure you did not purchase a fake flash memory item, you should always test it for capacity. The best tool is H2testw. It is free.
To learn more about it read:
H2testw 1.4 – Gold Standard In Detecting USB Counterfeit Drives

If you want to review all the counterfeits found on eBay you can visit three sites. Just type in the word Kingston o Sony or Transcend or Markvision in the search box to see what is currently documented:

MXT8208 controller chip -32GB Transcend fake

Source
MXT8208 VID = 1221 PID = 3234 Repair Fake Flash Drive Solution
Posted by inspectortech on December 11, 2008 FixFakeFlash – solution r identified with VID = 1221 PID = 3234, fake flash drive.
The drive tested and repaired was a fake 32GB “Transcend”.
Advertised as 32GB, it’s true capacity was 499MB.
This fake flash drive can be repaired using the following information.
Read About VID PID Repairing Counterfeit Flash Drives – Steps To Succeed before proceeding to solution.

Specifications reported by ChipGenius:
PnP Device ID: VID = 1221 PID = 3234
Serial Number: 0000000013A1
Revision: 2.20
Device Type: Standard USB device – USB2.0 High-Speed
Chip Vendor: micov(???)
Chip Part-Number: MXT8208
Product Vendor: USB2.0
Product Model: Flash Disk
Steps:
1. Download tool AMECO MXT6208/MXT8208 UDiskTools 1.0.4.6 (20081010)

Ameco is the New Parent company for the MPTools used in the past for micov.
It turns out my flash drive’s actual capacity is around 499MB (or slightly lesser, I think). Used UDiskTools1_0_4_6_20081010.rar to rectify it and state the true capacity. Thanks much for your suggestions above, which helped me fix the problem!

USB flash memory counterfeit brands

Source
COMMON counterfeit brands found flooding on eBay are:
A very high percentage of the counterfeit flash memories are using Hyperstone and iCreate memory controllers, instead of the original manufacturer's own memory controller!
How to tell if your USB drive is counterfeit and has fake oversize capacity?
  • The fake will deceive you by displaying the 'false/oversize' capacity when you connect it to your PC, however they will NOT be able to store the data to the stated capacity.
  • So you MUST perform data test by writing a BIG (1GB/2GB/4GB/8GB) file to the usb drive, then READ back the same file from the usb drive to another location on your PC to compare. The READ back process is the only proven way to uncover its 'REAL' capacity.
  • A genuine USB flash drive will complete data transfer of a single 1GB file anywhere from 50 to 180 seconds writing to. Usually the writing time is twice as long as the reading time.
  • The fake will take an excessively long time (1 to 7 hours) only 'pretending' writing but the data was not actually being written. Hence when you try to read it back, it will claim data as being CORRUPT. Many have reported that many strange files/folders eg. 00000.000 will appear and you cannot delete them.
  • The fake flash drives are usually shipped out from ASIA especially from China, Hong Kong, Korea or Singapore, and they are also listed on Australian, UK, USA and European's eBay.
  • The counterfeit model cannot be located or matched with any genuine models on the manufacturer's web site.
  • Counterfeit 'USB Flash Drive / Compact Flash / Secure Digital / Memory Stick' are flooding the eBay market at very low Buy-It-Now (too good to be true) price to make you think is an absolute BARGAIN.
How to avoid buying fake/counterfeit USB Flash Drives?


  • HIGH volume sellers do not guarantee items authenticity and in fact this tends to be the sign of counterfeit sellers with items usually set at less than half the market price in your country.

  • NEVER to be deceived by the high eBay feedback of the seller by not doing your homework, this is how it traps one after another. Findings are many provide positive feedback too early upon receiving an item without having the item being properly check out and tested first, hence many regret.

  • REMEMBER to check the seller's past selling history and especially AVOID sellers who have their bidder's ID protected or hidden.
  • GENUINE SanDisk, Sony and Kingston USB drives ALWAYS bundle with preloaded manufacturer software on the unit.
  • CHECK the model against the manufacturer's web sites to see if you can find a match. Some are easy to spot.
  • AVOID misleading slogans such as 'Opening special', 'New product not yet available in your country' or 'I am using one and it works very well for me'.
  • BEWARE of sellers that only list high-risk flash memory categories, such as 'SanDisk USB flash drives, SanDisk secure digital cards & Sony Memory Stick Pro Duo' and sellers that are using original SanDisk / Sony web download pictures to list corresponding counterfeit items as they do not represent the actual item that you will receive!
  • WATCH OUT for low Buy-It-Now item (value needs to be over $25 to be elligible for coverage under eBay Standard Purchase Protection Program) and where shipping fee far exceeds its item value (Circumventing eBay fee).
  • WATCH OUT for item disguised as eBay listings from your country but dispatched from China.
  • CONTACT SanDisk/Sony/Kingston counterfeit Hotline.
What to do if I have acquired a counterfeit item! Who is responsible?

  • Selling counterfeit items deceiving as genuine is considered as FRAUD, not merely a simple mistake. It is seller's sole responsibility.

  • Consumer protection laws are designed to protect all consumers, the gullible as well as the shrewd. The fact that a false statement may be obviously false to those who are trained and experienced does not change its character or take away its power to deceive others less experienced. Our consumer protection laws were enacted for the protection of the people, many who are trusting and naive about the wolves of the business world who come dressed in lambs' clothing.

  • Counterfeit items are NOT covered by genuine manufacturer's LIFETIME warranty.

  • If you have bought from high volume sellers, you should not be ALONE in the battle, kindly advise and encourage all buyers in same situation as you are to take action.

Here is a sample list of picture collection of all notorious counterfeit USB drives with fake 1GB to 8GB capacities. Hope this helps everyone to identify and avoid buying them!
--
--
---

Monday, August 23, 2010

Fake USB FlashDisk 1GB...32GB, 64GB, 128BG

Source Thanks, Sadjad Bahmanpour!
These two days I've been working on some USB FlashDisks / FlashDrives / Flash Disk / Flash Drive / Pen Drive ... , by request of a friend.
These Flashdrives where came from CHINA and last I've know they are FAKE, FAKED SIZE, FAKE SIZED , I mean they were 16MB but shown 1GB or 64MB and shown 32GB.
So Here I'm with some information for you to detect these fake flash drive and never buy them, I've seen them every where: ebay, amazon, some chinese web sites, ... just beware of HUGE size flashdrive with low price specially from CHINA.
First how indicate:
As mentioned here http://forums.hardwarezone.com/showthread.php?t=1642158 you have to copy alot of files (just like musics or picture) and copy them back to you hard disk check them all (you can use thumbnail view) and beware of the caching feature in Windows or you can also "Safe Remove" the disk and attach it again and check file names and you'll see some "00000 thing name" (you may see some aother things but not the original). The amount of files needed to do so depend on what really that one is, I mean is it really 16MB? so you need 17MB of files. but as I see they will use 16-128MB so you can simply use 130MB files and you'll see if it is allright or FAKE.
So the most import part is WHAT THE **** IS THAT THING, REALLY.
So I searched the web and found some usefull utils, and I'll tell the names and if you couldn't find them just leave me a message and I'll see what can I do for you.
First you need to identify the actual CHIP, YES THEY CAN RENAME IT (after you can too!), for this you can use a utility called USBVIEW.EXE this application will give you the Vendor and Product ID (idVendor, idProduct) and you can search for them in the Web, mine was 0x1043 0x8006, 0x8012 mean iCreate, you can refere http://www.linux-usb.org/usb.ids for Vendor and Product IDs.
If yours is iCreate too, so this is bad news, because as you can see in http://www.icreate.com.tw/e/icreate_e.htm andhttp://www.icreate.com.tw/e/soc_i512x.htm this company make "Configurable VID, PID, Vendor name, Product name, Product revision, and USB serial number" chips which is BAD, i mean **** YOU iCreate, by making this chips iCreate let other hackers do their work and make SONY MICRO VAULT 32GB, 64GB, 128GB.
The good news is if have iCreate there are some utilities that let you make the FlashDrive useable, I meant 16MB flashdrive useable, there is no workaround to let you have 128MB useable flashdrive, I mean fully useable.
These utilties are also made by iCreate and there are the things that those hacker company use to **** you by selling you 128GB flashdrives.
You can checkout
http://www.22b324.com/
http://www.22b324.com/down.php?nowmenuid=30189, just let the google translate it for you (The english site is under construction) and download I5xxx utils:
iFormat: some versions works on some chip numbers, so try i5122 or 5128, i5022, ... if it closed automatically (just the GUI will be hidden but the iFormat2.exe is in task manager) means you hit the wrong utility. This utility use for formatting the drive and password protecting it, but for me this (format) worked after PDx8, PDx16 which I'll introduce later.
PortFree Production Program , PDx8 and PDx16: for i5022 I used the PortFree Production Program 3.27 and for i51xx I used PDx16 goto options and just select the "LOW LEVEL FORMAT / LLF" this application will be used to Format the FlashDisk and this will make the Size REAL, for me: 1GB -> 16MB , 32GB -> 64MB. The PDx16 will take a minute or two to open and work, this is very slow, but this will work.

** Note that there are all work under Windows Server 2003 or maybe Windows XP, these will not work under Windows Vista. So If you want to test these FlashDrive NEVER use WINDOWS VISTA. **
** I also found an application name "System Information Veiwer - SIV" which you use to see the Vendor name of USB FLASH DRIVEs, but I mentioned that this is very large, I always want a software to see the MEMORY/ CPU BUS SPEED and this will work like a charm.So these are what I've found, Tell me if you know more.
 ************************
 Update #1: I've uploaded some useful (mentioned above) utilities in Windows Live SkyDrive, hope these will help you identify if someone sold you FAKE USB DRIVE:



Update #2: I've just found out that the SIV has its own web site so I'll remove my link (and also the file) and here the original link http://rh-software.com/ sorry that delete this from my SkyDrive but I always said that you have to download from the origin (if there is some).
************************
To fix an Emprex 8gb flash drive by using USBView to identify the vendor (which turned out to be Transcend) and that led me to their repair utility which did the trick.
transcendusa.com/Support/DLCenter/...Recovery%20Tool%20v1.0.12.zip

FAKE SONY 128U2 & SONY MICROVAULT

Source 
1Gbit or 1Gbyte? 1Gbit/8bit = 128Mbytes.
regarding the SONY MICROVAULT drive,

if your drive is not being recognized by the iformatter (Low Level Format Programme) & password programme downloaded from SONY Site, then your SONY Drive is for SURE FAKE !!!

You probably would have got a minicdrom drive, having 3 or folder namely "PP2201", "PP2202", Win98 etc

If you have the minicdrom having these folders then your USB Flash Drive controller (not saying the drive) is made by
PointChips [url]http://www.pointchips.com[/url]

You would also have got the MangerX prgramme on the accompanied CDROM but that wouldnt have detected your FLASH Drive. If your FLASH DRIVE is detected & are able to format then you are among the very few lucky ones.

In order to solve the data corruption problem (which generally occurs after using the drive for sometime),
You need to Low Level format the USB Drive with the Formatter designed for the PP2201 controller.

There is download section at the Pointchips site but thas closed for open public. & furthermore the company doesn't provide the generic format utility FOR SECURITY REASONS (Ahh.. dunno what the legitimate users will do)
To be EXTRA SURE, you can physically see the CHIP on your SONY MICROVAULT, the two pieces of platic cover are easily detached with some force (Pull in Strainght Line - Dont bend).
Easier way is to have a extra strendth flash light, put it at some angle on the middle Translucent Part & you would see the "FreeDik PP2201" on the controller chip. Thas the 110% confirmation that your drive is using a Pointchip controller & coz of the you are unable to get Iformatter working. (probably the actual SONY Drive uses some other controller or some other PID )
Wanted to share this with you, so that anyuser who is gonna buy any FLASH drive, please make sure that you are able to RUN lowlevel format utility from the manufactures web site. DOnt trust the accompanied CDROM rather always get the latest drivers/utilties from the compnay site & check.

I also own a FAKE SONY 128U2 -- & thas giving data corruption problem.


PortFree Production Tool 3.16 and 3.20 for i5062-ZD and i5068-ZD (PDx8 v3.16, PDx8 v3.20)
Attachment: pdx8_2k_320.zip
My 4GB drive also shows corrupted folders once every few days.
So I downloaded 3.16 and 3.20 PortFree Production utility and did low level format and flash test and now my drive shows as 256MB rather than 4GB.
However, when this drive has i5062-ZD controller and a samsung memory chip K9E2G08U0M which is 256Mx8, which is 2GB.
samsung.com/.../Flash/NAND/2Gbit/K9E2G08U0M/K9E2G08U0M.htm
 
 
fake device with following chips: controller i5062-ZD
([url]www.icreate.com.tw[/url]) and memory M29ABGPAH 0512 
([url]www.StarRam.com[/url] ????).
The utility iFormat does not recognize this device though it is intended for the controller i5062-ZD. I've use WinXP Professional. Today I've to install iFormat and drivers under Win98.

MXT6208A controler chip

Source
Another USB Fixing blog post, today two sticks each with Controller MXT6208A and Memory Samsung 725/ K98G08U0M/ WNE197PA ( 8 gigaBIT memory, that means 1 gigaBYTE or 1 GB of capacity).
Sticks as usual came with the fancy shiny 16 GB stickers on them.
The white one I was able to put back together without cosmetic damage !!

Pen Drives
Picture : Shows the 2 keys just out of the packaging , with the shiny 16 gig sticker.
Lets see how they look from inside now :)
The white one first (note the capacitor (on bottom right ), its got bad solder join, sheesh)
MXT6208A Chip
And here is the blue one , note on the left thats the metal casing which had to be peeled/pulled apart.
AU6980 controller chip
Here is the memory snap shot from the white key, as could not get the key out for its case from the blue one cause of epoxy or w/e that blob of glue is (is holding it pretty tight in place) .
Sasmung Memory K98G08U0M
Now lets begin hacking our way and fix these flashed/fake usb keys.
Took me a while to find the right version of Mptools, and the chinesse site where you can get them from now has only invitation based registerations and requires credits/money for downloads of files, tried to spend $4 to get enough credits to download the tools, but their paypal account does not accept USD , so was stuck till I googled and found the tools on other sites :) . Various versions were downloaded (about 6) but only 1 clicked and worked. Download this Mptool File :) MPTool-2007103-Fix-Usb-key
Now its the simplest fix ever (after you get right tool). Simple insert your fake pen drive into the usb port, and open up the exe file (unzip above file first) and it should show up something like this in the picture (if your stick/controller card is the list it should show up too ) .
Step 1. Insert key, open the exe file , and hit the little U icon (or the E Icon (its just your usb key drive letter only and will vary from user to user) as suggested by Barrows) if your stick is recognized off the bat, if not just hit setup ctrls and select one from the list on the left (uncheck the auto feature first on the top left there).
Step 1 to using Mptools
Step 2. After format is complete simply unplug the key from computer, and format it using win xp or any tool you like (but do not use quick format, just let it format using simple format) and your key is now all set to be used, without worry of data corruption (but do note these are not legit keys, so i wouldnt put anything that is really really important on these keys ) .
Usb Key fix underway
If you need any help with your keys let me know, but to find exact version of tool to fix your particular usb pen drive is hit and trial. So , it might take you some time to fix your usb drive to default factory built memory capacity.

ICREATE i5128 controller chip










Test app, simple and free:
myblog.bloggybloggy.com/hacked-usb-key-ebay-scam-07-04-2008/
===================================

The best program to test and restore fake flash drives is to use the "production tool" program provided by the controller maker. 
For iCreate i5128, it's i5128-PDx16V1.34:
4shared.com/dir/2XPCZBH8/__iCreate.html
Here are the most important applications and tools for manipulation and reparation of  fake usb devices






Tutorial on how to fix your flashed/fake usb key which uses ICREATE – i5128 controller chip to flash it to wrong capacity, and uses Hynix memory chip.
First of all here are few pretty images of my fake usb memory stick i got off ebay :
Top View - Fake USB Key - iCreate 5128
Top View of my Fake Icreate Based USB Key.
This image below shows the use of Icreate i5128 -LG L726 Controller chip
Top View - Fake USB Key - iCreate 5128
Again the memory used was Hynix (seems like they say on ebay its samsung memory but stick in Hynix memory instead Hynix HY2UU08AG5M a 2 GB capacity chip).
Top View - Fake USB Key - iCreate 5128
So, after you have confirmed that your memory stick is using icreate proceed as below to fix your stupid fake usb memory stick :
Step 1 to Fixing Fake USB Keys : Download iCreate 5128 Utility (attached for easing your pain). RAR Version- i5127-PDV1.08B3.rar
Step2 to Flashing fake usb key to original Capacity : (just follow the quick Graphical instructions , simple as pie, other controller required more efforts not this one :) . First unzip the file you downloaded, and execute PD.exe , hit App Flash to get going :) .



Samsung 813 chip I tried AlcorMP and it’s not detecting the drive,
and I also tried Icreate and it says “Wait” when I click on “App Choice”, and does not come back with a response.
the samsung controller is: mxt6208a
The true capacity of the drives is 4GB, I used bst5.exe for verification.
iFormat2: for some reason it runs in the background but does not show the UI.
PD V1.08 : when I click AppChoice, it says wait in all Device boxes and does not come back.
I fould the software for the ICreate i528, the latest version can be downloaded here.
http://www.freespace.com.au/filehosting/118564
=================================
Source
Fake “8GB” usb flash drives from an ebay seller with the same features as the flash drive found on this page :
http://www.made-in-china.com/showroom/feetek/product-detailUeqxXHbTsaVm/China-USB-Flash-Disk-FT-125-.html
The page suggests that the capacity may reach 8GB, with maximum read speed of 17mb/s and write speed of 15mb/s but that wasn’t the case with the models we received from the seller. The items are no longer on sale unfortunately, and I do not have the seller’s info (I will forward those details if I find them though).
After the first month of having the flash drives, it was quickly realised that the capacity on the formatted drives would max out at 4 gigabytes – half of what was displayed in windows. The read speed shown in vista was 10mb/s and the write speed maxed out at 2mb/s (although once past the ‘actual’ capacity of the drive –the write speed jumped to 20mb/s ‘on air’).
We knew we had been swindled but decided against doing anything figured 4GB is good enough – but the constant corruption of data past 4GB was annoying.
After making my own ebay account, I started looking for large capacity (16-32-64GB) flash and compact flash drives – and started getting interested in the negative feedback of some sellers. Apparently a large quantity of people have been receiving items with capacities marked way higher than the actual – corruption resulted past the actual values when used.
This sparked my interest in repairing these drives.
I found out the model of the drive components by physically opening the disk (it actually came apart by itself after it became heated one day while plugged in) and looking at the chips used.
This particular model had an iCreate (or just Create) i5128-LG (or i5128-L) flash memory controller, which is capable of controlling up to two chips up to 16GB. The memory stick itself is only manufactured in capacities up to 8GB. The flash chip was known to be 4GB – and had no identifiable markings on it.
From h2testw (before repair):
The media is likely to be defective.
3.9 GByte OK (8325561 sectors)
3.8 GByte DATA LOST (7982663 sectors)
Details:3.8 GByte overwritten (7982663 sectors)
0 KByte slightly changed (< 8 bit/sector, 0 sectors)
0 KByte corrupted (0 sectors)
2 KByte aliased memory (4 sectors)
First error at offset: 0x00000000fe137200
Expected: 0x00000000fe137200
Found: 0x00000000fe137000
H2testw version 1.3
Writing speed: 3.69 MByte/s
Reading speed: 11.7 MByte/s
H2testw v1.4
Armed with this info, I went onto the website http://www.flashboot.ru/index.php?name=iflash mentioned in Electrostorm’s tutorial and used the Translated to English (recommended) option.
Keying in ‘i528’ gave a few results – some with links to applications. I selected the iCreate PDx16 (i5128-PDx16V1.34) application download link – unzipped it and opened it.
The interface is simple but kind of hard to understand without some trial and error. It shows up to 16 devices on one screen – any iCreate enabled flash drives show here.
Clicking on options opened up a large selection of features that could be changed in order to change the capacity, memory type and function of the program.
After a few attempts; I found that using the options:
- ‘Enable Assigning Flash’ under the tab ‘Select Flash’; and changing the flash options to ‘Samsung MLC x8 bus capacity 16384mb part K9LAG08U0’
- selecting the ‘Mark Scan’ option under the tab ‘Flash Setting’ with the options ‘Default – Speed Optimization – Speed Adjust 3/3’
- and finally enabling the ‘Capacity Adjust’ option under the tab ‘Capacity Adjust’ with the settings ‘4092 – 5% error’ allowed for the most error free function of h2testw.
- Also note; the options under ‘Action Setting’ allow for the selected options to run ‘Run Setting’, or the flash drive can be erased ‘Erase Flash’ or Checked ‘Check Flash’ – I performed an erase before attempting the settings above (it may have contributed to my success)
From h2testw (after repair):
Test finished without errors.
You can now delete the test files *.h2w or verify them again.
Writing speed: 3.55 MByte/s
Reading speed: 7.08 MByte/s
H2testw v1.4