How to solve iPhone SSH – Software caused connection abort / Server unexpectedly closed network connection

25 Feb

Ikee virus.

It appears that the reason is a virus affecting iPhone/iPod Touch that have been jailbroken, but have not changed the default root password (‘alpine’).

To resolve the problem:

Connect to your jailbroken phone via USB, using iPhone Explorer or DiskAid (both of them are freeware, Google them)

Remove these files that have been installed by the virus:

  1. /bin/poc-bbot
  2. /bin/sshpass
  3. /var/log/youcanbeclosertogod.jpg
  4. /var/mobile/LockBackground.jpg
  5. /System/Library/LaunchDaemons/com.ikey.bbot.plist
  6. /var/lock/bbot.lock

(if you don’t find the two .jpg files, it is normal, just proceed with the rest of the files)

Reboot, reinstall OpenSSH

 

Change root and mobile password (default password alpine)

  1. Install the MobileTerminal package using Cydia.
  2. Run the Terminal app.
  3. Type “su root” without the quotes and touch return.
  4. Type the root password “alpine” and touch return.
  5. You are now logged in as root. Type “passwd” and touch return.
  6. Enter your desired new password. You won’t see the characters. Touch return and the iPhone will prompt you to retype the new password. Enter the new password again.
  7. Type “exit” and touch return.
  8. After you change your root password you should consider changing the password for the user “mobile” as well. This will further protect your data.
  9. Run the Terminal app. You are now logged in as mobile.
  10. Type “passwd” and touch return.
  11. Type the mobile password “alpine” and touch return.
  12. Enter your desired new password. You won’t see the characters. Touch return and the iPhone will prompt you to retype the new password. Enter the new password again.

 

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: