Monday, September 20, 2010

Remove Ikee Worm on Iphone

If you notice your battery suddenly drain sooo fast, and/or you found poc-bbot on process list (you can use "System Activity Monitor" to see the process list) thats mean your Iphone infected with Ikee Worm.

Instruction to delete the worm can be found at http://www.pcworld.com/businesscenter/article/182893/how_to_deworm_your_iphone.html or http://egyptianapple.com/?p=1742

My simple guidance:
Use DiskAid or Iphonebrowser to delete files below:
/bin/poc-bbot
/bin/sshpass
/System/Library/LaunchDaemons/com.ikey.bbot.plist
/var/lock/bbot.lock

If your background is changes too delete files below:
/var/log/youcanbeclosertogod.jpg
/var/mobile/LockBackground.jpg

restart Iphone

If that doesn’t do it, an alternate version of the ikee worm requires you to remove these files instead.
/usr/libexec/cydia/startup
/usr/libexec/cydia/startup.so
/usr/libexec/cydia/startup-helper
/System/Library/LaunchDaemons/com.saurik.Cydia.Startup.plist
If you removed the above four files, you’ll have to reinstall Cydia.

And the most important thing after install Cydia and openSSH don't forget to change root password!! using pTerm.

No comments:

Post a Comment