iphone jailbroken? ikee is never going to give you up..

By Rohit On November 9, 2009 · 7 Comments

The first worm to infect the Apple iPhone has been discovered spreading “in the wild” in Australia.

The self-propagating program changes the phone’s wallpaper to a picture of 80s singer Rick Astley with the message “ikee is never going to give you up”.

The worm, known as ikee, only affects “jail-broken” phones, where a user has removed Apple’s protection mechanisms to allow the phone to run any software.

How to fix:

change ssh password for iphone

First off, fire up Cydia and download an application called MobileTerminal. It’s nice and small so shouldn’t take too long. Once downloaded launch it and you’ll be faced with a screen very much like the screenshot over on the left. It’s basically a terminal window just like OS X and linux.

Now just enter the command:

passwd

Now you’ll be asked for your old password which should be ‘alpine’, followed by your new one (twice). Nice and simple.

After this your jailbroken iphone is little more secure as it will be not easy fo anyone to install anything on your iphone now.

TJ

Thanks for this. But it doesn’t remove the worm, only protects from future. I did it n rick astley is still staring at me. Darn. Any other tips?

Rohit Prabhakar

Hi TJ

You are right. This helps to prevent but in order to fix it please follow the steps as mentioned below:

Logon as Root and remove the following files:
(1). /var/mobile/Library/LockBackground.jpg
(2). /System/Library/LaunchDaemons/com.ikey.bbot.plist
(3). /bin/poc-bbot
(4). /bin/sshpass
(5). /var/log/youcanbeclosertogod.jpg

For those who use mobileterminal to delete files and not familiar with linux command, the command for deleting files is “rm”.
Example, rm /var/mobile/Library/LockBackground.jpg (linux path is case-sensitive)

TJ

Thanks for this. But it doesn’t remove the worm, only protects from future. I did it n rick astley is still staring at me. Darn. Any other tips?

Rohit Prabhakar

Hi TJ

You are right. This helps to prevent but in order to fix it please follow the steps as mentioned below:

Logon as Root and remove the following files:
(1). /var/mobile/Library/LockBackground.jpg
(2). /System/Library/LaunchDaemons/com.ikey.bbot.plist
(3). /bin/poc-bbot
(4). /bin/sshpass
(5). /var/log/youcanbeclosertogod.jpg

For those who use mobileterminal to delete files and not familiar with linux command, the command for deleting files is “rm”.
Example, rm /var/mobile/Library/LockBackground.jpg (linux path is case-sensitive)