Thursday, November 19, 2009

iPhone: Remove ikee worm


Jailbroken iPhones are at risk of being infected with ikee worm.

Most people (like me) should be affected by the first 3 A,B,C variant.

Which variant am I into? If you can find the files in the 1st scenario to delete, then u are having the variant A,B,C.  Please make sure you have install MobileTerminal on your iPhone before you start.


1st Variant
  1. Launch MobileTerminal. Login to root "su root" with default password "alpine".
  2. Enter each line of command and press return key.  Tip: Commands are case sensitive
    rm /bin/poc-bbot
    rm /bin/sshpass
    rm /var/log/youcanbeclosertogod.jpg
    rm /var/mobile/LockBackground.jpg or rm /var/mobile/Library/LockBackground.jpg)
    rm /System/Library/LaunchDaemons/com.ikey.bbot.plist
    rm /var/lock/bbot.lock
  3. Reboot iphone.
  4. Change password and reinstall Open SSH.

 2nd Variant

  1. Launch MobileTerminal. Login to root "su root" with default password "alpine".
  2. Enter below commands and press return key after each line.  Tip: Commands are case sensitive
    rm /System/Library/LaunchDaemons/com.saurik.Cydia.Startup.plist
    rm /usr/libexec/cydia/startup
    rm /usr/libexec/cydia/startup-helper
    rm /usr/libexec/cydia/startup.so
  3. Reinstall Cydia with below command.
    su root
    alpine
    get-app remove cydia
    get-app install cydia
  4. Reboot iPhone. Now you should be worm-free....

0 comments: