i am using iphone 3GS 3.1.2 ,
i have install openssh to my iphone and i want to connect with winscp ,
at 1st time is last 2 week i can connect ,
this 2day i want to connect is come out this message
"server unexpectedly closed network connection"
I'm getting the same issue as well. Tried many methods from google but no luck. It worked fine for me since I updated to 4.1 yesterday for a bit. Then after a while it hasn't been able to work and up till now I'm still having this problem. I really want my SSH access back.
Experiencing the same problem. Updated to the recent version and ever since I can't ssh into my 3GS. Times out or program closes due to not responding. Have not made any changes to my pc or iPhone before or after update.
Originally Posted by si3gheart
Delete this files: (I used iFile
/ System / Library / LaunchDaemons / com.ikey.bbot.plist
/ Bin / poc-bbot
Technical Information (Analysis)
Worm:iPhoneOS/Ikee.C is a worm that uses the default root password in SSH in order to spread among jail-broken iPhones. The worm also changes the affected machine's background image.
When run on an iPhone, this worm takes the following actions:
1. Attempts to set a file lock at /var/lock/bbot.lock in order to verify that only one copy of the worm runs at a time.
2. Attempts to copy the file /var/log/youcanbeclosertogod.jpg to /var/mobile/Library/LockBackground.jpg
3. Removes the /usr/sbin/sshd directory and stops the SSH daemon.
4. Attempts to spread using several hard-coded IP ranges.
When the worm infects a remote host, it does so by copying /bin/poc-bbot, /bin/sshpass and /var/log/youcanbeclosertogod.jpg from the local system to the remote system. It also copies /var/log/youcanbeclosertogod.jpg to /var/mobil/Library/LockBackground.jpg on the remote system.
The file /System/Library/LaunchDaemons/com.ikey.bbot.plist is also copied to the remote system and the following command is run:
"launchctl load /System/Library/LaunchDaemons/com.ikey.bbot.plist"
This command is used to load the worm remotely, and to add it to startup on reboot on the remote machine.
The worm then remotely stops the SSH daemon and deletes the automatic start on reboot option for the SSH service.