Newbie faqs/guide on how to remove the virus...

Question 1: How can I STOP ikee Virus to enter my iPhone?

Answer 1: You need to change your iPhone root password. By Default its “alpine”.

Question 2: How do I change my root password?

Answer 2: Please follow these steps

• Install Mobile Terminal from Cydia
     
  
  
• Once installed, start Terminal from your iPhone
     
  
  
• Now type “su root” and hit return
     
  
  
• Enter your password “alpine” and hit return – by default is “alpine”
     
  
  
• Now enter “passwd root” and hit return
     
  
  
• Now, it will prompt you to enter NEW PASSWORD.
     
  
  
• Enter NEW PASSWORD.
  
  

*******these commands are case sensitive.

Question 3: How do I know if my iPhone has ikee Virus?

Answer 3: Look at the screen shots below. If you see them on your iPhone – You have ikee Virus.



ikee Virus Lock Screen



ikee Virus On Call

Question 4: OMG!! How do I get rid of ikee Virus?

Answer 4: There are FOUR Variants A, B, C, & D in this ikee Virus.

• Variants A-C Follow these steps
  
  

   1. First Change your root password (Follow Answer 2).
   2. Now, will start deleting bunch of virus effected files..
   3. Type “rm /var/mobile/Library/LockBackground.jpg” and hit return- With out “s
   4. “rm /System/Library/LaunchDaemons/com.ikey.bbot.plist” and hit return
   5. “rm /bin/poc-bbot” and hit return
   6. “rm /bin/sshpass” and hit return
   7. “rm /var/log/youcanbeclosertogod.jpg” and hit return
   8. Now, close Terminal app.
   9. Select your favorite wallpaper and reboot your iPhone.

• Variant D – Follow these steps
  
  

   1. First Change your root password (Follow Answer 2).
   2. Now, will start deleting bunch of virus effected files..
   3. “rm /usr/libexec/cydia/startup” and hit return
   4. “rm /usr/libexec/cydia/startup.so” and hit return
   5. “rm /usr/libexec/cydia/startup-helper” and hit return
   6. “rm /System/Library/LaunchDaemons/com.saurik.Cydia.Startup.plist” and hit return
   7. Now, close Terminal app.
   8. Reboot your iPhone.

****If you got effected with Variant D. You need to reinstall Cydia.

Question 5: I have installed SSH but, I turn off when I don’t need it. Do I still change the default password?

Answer 5: Its a very good practice to keep it turned OFF when not needed. But, I recommend you to change the default password.

Question 6: I have a jailbreak iPhone But, SSH is not installed. Do I need to worry about it?

Answer 6: This ikee Virus, enters where SSH is running with default password. So, in your case you don’t have to worry about this virus.

[via machackpc]