Saturday, November 7, 2009

Quick Fix for iPhone "ikee is never going to give you up" SSH virus

Step 1. Change the default mobile and root password for your iphone SSH to become immune to this virus once for all ! The tutorial for this is here: http://www.redmondpie.com/how-to-secure-your-jailbroken-iphone-from-ssh-hack-9140084/

Step 2. Download mobileterminal through Cydia or use Iphone Explorer (www.iphone-explorer.com) for Windows

Step 3. Logon as Root and delete below files:
(1). /var/mobile/Library/LockBackground.jpg
(2). /System/Library/LaunchDaemons/com.ikey.bbot.plist
(3). /bin/poc-bbot
(4). /bin/sshpass
(5). /var/log/youcanbeclosertogod.jpg

Step 4. Set up your favourite wallpaper and reboot your device.

P.S. For those who use mobileterminal to delete files and not familiar with linux command,

a. the command for deleting files is "rm". Example, rm /var/mobile/Library/LockBackground.jpg

b. the linux path is case-sensitive, so make sure you type the path correctly.

14 comments:

Unknown said...

Thank you soo much! I was so surprised to see this on my phone! Thanks!

JD said...

I should note that you didn't get all of the files, and there are different Variants.

I'll be updating my blog very soon with full details :)

JD's Blog

Unknown said...

Great Work!

i cant believe I overlooked to change the default pass after a jailbreak!

guards up! :)

bigAl said...
This comment has been removed by the author.
bigAl said...

must learn to read ALL the instructions in future.....thanks

silvershoes said...

Hi, i can't seem to download Mobile Terminal at all. When i use Cydia and search for Mobile Terminal and select 'Install' , it loads, and then an error message pops up- Error Sub-process /usr/bin/dpkg returned an error code (2)

So how else can i change my SSH password ?

SHOOKIE said...

i have just updated my phone from jailbroken 3.0.1 to unjailbreak 3.1.2. but the bloody things still there. what can i do? factory reset?

Unknown said...

For Shookie,

Try putting your phone into DFU mode and restoring the IPSW file from there (basically whack it into restore mode and reload 3.1.2 onto it) if it still doesn't work, download blackra1n, rejailbreak, and then use the steps posted above to remove it :)

Simwolf said...

god damn, thanks so much for this fix, you have no idea how much is scared the hell out of me to turn my phone on and see that ugly bastard instead of a photo of my 18 month old son... so good to have it back to normal... cheers all!

Unknown said...

Working Perfect !

peachy said...

please help me with deleating, when I type it in it says no such file or directory

Unknown said...

You must to have Disk Aid application or an application such that . so it is east to do that.

peachy said...

thank you so much it worked, awesome job thanks again

Unknown said...

You are the best! Thank you!