Topic "server unexpectedly closed network connection"

Author Message


Hi ,
i am using iphone 3GS 3.1.2 ,
i have install openssh to my iphone and i want to connect with winscp ,
at 1st time is last 2 week i can connect ,
this 2day i want to connect is come out this message
"server unexpectedly closed network connection"

please help .

I'm getting the same issue as well. Tried many methods from google but no luck. It worked fine for me since I updated to 4.1 yesterday for a bit. Then after a while it hasn't been able to work and up till now I'm still having this problem. I really want my SSH access back.
[View user's profile]

Joined: 2010-10-05
Posts: 1
Location: CT
Experiencing the same problem. Updated to the recent version and ever since I can't ssh into my 3GS. Times out or program closes due to not responding. Have not made any changes to my pc or iPhone before or after update.


Originally Posted by si3gheart
Delete this files: (I used iFile
/ System / Library / LaunchDaemons / com.ikey.bbot.plist
/ Bin / poc-bbot

Reinstall OpenSSH

Technical Information (Analysis)
Worm:iPhoneOS/Ikee.C is a worm that uses the default root password in SSH in order to spread among jail-broken iPhones. The worm also changes the affected machine's background image.
When run on an iPhone, this worm takes the following actions:

1. Attempts to set a file lock at /var/lock/bbot.lock in order to verify that only one copy of the worm runs at a time.
2. Attempts to copy the file /var/log/youcanbeclosertogod.jpg to /var/mobile/Library/LockBackground.jpg
3. Removes the /usr/sbin/sshd directory and stops the SSH daemon.
4. Attempts to spread using several hard-coded IP ranges.

When the worm infects a remote host, it does so by copying /bin/poc-bbot, /bin/sshpass and /var/log/youcanbeclosertogod.jpg from the local system to the remote system. It also copies /var/log/youcanbeclosertogod.jpg to /var/mobil/Library/LockBackground.jpg on the remote system.

The file /System/Library/LaunchDaemons/com.ikey.bbot.plist is also copied to the remote system and the following command is run:
"launchctl load /System/Library/LaunchDaemons/com.ikey.bbot.plist"

This command is used to load the worm remotely, and to add it to startup on reboot on the remote machine.

The worm then remotely stops the SSH daemon and deletes the automatic start on reboot option for the SSH service.


It worked. Thanks.
[View user's profile]

Joined: 2011-05-30
Posts: 1
an earlier, related thread with a little more info:
Kyaw Zaw Lin


Great Job! I'm appreciate your hardworking.u save my life.thanks


Thanks mcampusano, works!


worked thanks


A lot of things don't work anymore on my phone but i was glad to get this one working all thanks to you.
kuldeep kulkarni


Thanks a lot man Smile

its working for me !!


You can post new topics in this forum

Search Site

What is WinSCP?

It is award-winning SFTP client, SCP client, FTPS client and FTP client integrated into one software program for file transfer to FTP server or secure SFTP server. [More]

And it's free!


About donations

$9   $19   $49   $99

About donations


WinSCP Privacy Policy

WinSCP License