Home » 2G, 3G, 3G S, Featured, iPhone

iPhone Virus (ikee or rickroll) – Protect your iPhone

By Mac Hack PC 8 November 2009 View Comments
Virus

Virus

ikee Virus OR rickroll Virus

For all Jailbreak users with SSH running on their iPhones - WARNING!!! WARNING!! and WARNING!. ikee Virus is watching you and may enter your iPhone.

Here is the Original Source

Question 1: How can I STOP ikee Virus to enter my iPhone?

Answer 1: You need to change your iPhone root password. By Default its “alpine”.

Question 2: How do I change my root password?

Answer 2: Please follow these steps

  • Install Mobile Terminal from Cydia
  • Once installed, start Terminal from your iPhone
  • Now type “su root” and hit return
  • Enter your password “alpine” and hit return – by default is “alpine”
  • Now enter “passwd root” and hit return
  • Now, it will prompt you to enter NEW PASSWORD.
  • Enter NEW PASSWORD.

*******these commands are case sensitive.

Question 3: How do I know if my iPhone has ikee Virus?

Answer 3: Look at the screen shots below. If you see them on your iPhone – You have ikee Virus.

ikee Virus Lock Screen

ikee Virus Lock Screen

ikee Virus On Call

ikee Virus On Call

Question 4: OMG!! How do I get rid of ikee Virus?

Answer 4: There are FOUR Variants A, B, C, & D in this ikee Virus.

  • Variants A-C Follow these steps
  1. First Change your root password (Follow Answer 2).
  2. Now, will start deleting bunch of virus effected files..
  3. Type “rm /var/mobile/Library/LockBackground.jpg” and hit return- With out “s
  4. “rm /System/Library/LaunchDaemons/com.ikey.bbot.plist” and hit return
  5. “rm /bin/poc-bbot” and hit return
  6. “rm /bin/sshpass” and hit return
  7. “rm /var/log/youcanbeclosertogod.jpg” and hit return
  8. Now, close Terminal app.
  9. Select your favorite wallpaper and reboot your iPhone.
  • Variant D – Follow these steps
  1. First Change your root password (Follow Answer 2).
  2. Now, will start deleting bunch of virus effected files..
  3. “rm /usr/libexec/cydia/startup” and hit return
  4. “rm /usr/libexec/cydia/startup.so” and hit return
  5. “rm /usr/libexec/cydia/startup-helper” and hit return
  6. “rm /System/Library/LaunchDaemons/com.saurik.Cydia.Startup.plist” and hit return
  7. Now, close Terminal app.
  8. Reboot your iPhone.

****If you got effected with Variant D. You need to reinstall Cydia.

Question 5: I have installed SSH but, I turn off when I don’t need it. Do I still change the default password?

Answer 5: Its a very good practice to keep it turned OFF when not needed. But, I recommend you to change the default password.

Question 6: I have a jailbreak iPhone But, SSH is not installed. Do I need to worry about it?

Answer 6: This ikee Virus, enters where SSH is running with default password. So, in your case you don’t have to worry about this virus.

To get updated info on ikee virus or any other iPhone Hacks, Mac Hacks, Windows Hacks, Linux etc related stuff Follow us @machackpc

You may be interested in these articles also:

Happy Hacking..

If you enjoyed this post, make sure you subscribe to my RSS feed!

Related Posts with Thumbnails

  • What’s NEW in iOS 4.1
  • More and more Next Gen iPhone Videos in the wild
  • Windows Phone 7 Phone - HTC Mondrian Image and Specs.
  • Blackberry OS 5.0.0.554 for Bold 9000 & Curve 8900 Leaked
  • Nvidia Tegra and Android OS 3.0 (Gingerbread) a winning formula.
  • How to Jailbreak iPhone 3G with iOS 4 GM using RedSn0w 0.9.5
  • New FlashLight Feature (or a Bug) in iPhone OS 4.0
  • Web Plugin by Christopher Ross


  • View Comments »

    • iPhone Virus (ikee or rockroll) – Protect your iPhone | Mac Hack … | Mac Affinity (author) said:

      [...] More here: iPhone Virus (ikee or rockroll) – Protect your iPhone | Mac Hack … [...]

    Leave your response!

    Add your comment below, or trackback from your own site. You can also subscribe to these comments via RSS.

    Be nice. Keep it clean. Stay on topic. No spam.

    You can use these tags:
    <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

    This is a Gravatar-enabled weblog. To get your own globally-recognized-avatar, please register at Gravatar.

    blog comments powered by Disqus