Sidebar Sidebar
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

Trojan on my iPhone

M

MuseumVisitor

macrumors member
Original poster
Nov 20, 2010
88
17
Hi Guys,

Recently, I started having trouble backing up and syncing my iPhone with my Mac via iTunes. I kept getting an error message: "iTunes could not back up the iPhone because not enough free space is available on this computer" even though my new MacBook has 1.5TB space left. After hours of struggle (including the process of going through a recovery mode - reinstall os x - which it did not help) I realized that it may have to do with a trojan file that my “Virus Scanner Plus” was alarming me of every time I try to sync my iPhone with my Mac. And only if I turn “Virus Scanner” off and let the file in, I can sync my iPhone. So my only solution was to let the trojan into my computer and then after my iPhone is synced, I would to my Mac MobileSync -> Backup - and delete this infected_JS file called:

e332bd3fe863eb5a49b7191c72bf2abbdd218592

Is anyone of you aware of this JS:Trojan.JS.Downloader.FE that clearly is coming from my iPhone?
Is it malicious and how did it ever get into my iPhone? Is there anything else that I can do to get rid of this file from my iPhone (I did clean history and website data) but this trojan is keep being detected every time I try to sync my iPhone and my Mac via iTunes. So it's still there on my iPhone and Im avoiding to do a clean reset of my iPhone because the Im not so sure if I have a “clean” unaffected backup.



This is what it says in this questionable file:



[MOD NOTE]
Code has been removed by the moderation team. There's no reason to publicly post potentially malicious code in the forums.
 
Sorry guys for the posted code. I was extremely intrigued with the presence of this trojan file on a iPhone and was hoping that someone can quickly build a protection against it if they are fully aware of the the way how it was built. I thought that if its not inside of the system it would not hurt since it's only read as a plain text on a web site. Hoping also that Apple would be able to catch the app that created it (again, I cleaned Safari iOS and the file is still there - which Im concluding is because of the fact that is part of an app). Otherwise, people will be installing them on their phones without knowing.

I may be lucky to have downloaded it on a Mac (thank you T'hain for your response!), but what about all those people who are syncing their iPhone with PCs?

The question still remains why iTunes was refusing to sync if Virus protection program is continuously scanning for bad things?
 
Could it be in your email or messages?

Seems unlikely but maybe it could've been introduced by a dodgy app, especially one that has file storage capabilities.

Where exactly is the Trojan file stored on your computer when you allowed the backup? If in the Phone's backup location then where in particular? This may give some clues.

What if you backup your phone, then reinstall it after deleting the Trojan from the backup directory?

Failing that you may need to copy a list of your installed applications, reset the phone and delete the backup and completely set it up as new. Also delete and start redownloading all your applications and try installing them several at a time.

Nobody wants a Trojan even if it's a PC one.
 
Hi Simonmet,
1. The questionable file was put in my user - library - application support - mobilesync - backup - my iphone - e3 folder
2. Im afraid to reset the phone because my backup may not be "healthy" since it was so hard to make it and Im about to go on a trip. I have no time to manually add the things to my iPhone.
3. Im not sure if it can be from an email. Im never sync my emails via may Mac - iTunes does not have this command to bring the emails in. However, I do have all the same email messages coming from my internet provider, but I do not recall that my Mac ever signalled that I have trojan in my email.
 
I have a Trojan on my phone.
 

Attachments

  • IMG_0002.PNG
    IMG_0002.PNG
    4 MB · Views: 736
  • Haha
  • Like
Reactions: Taz Mangus and M. Gustave
He, he, I thought you had a condom on your phone to make it waterproof or safe from viruses etc. and was looking for the pic. :)
 
  • Like
Reactions: M. Gustave
@ Applejuiced
My Virus scanning program did catch and deleted this malware from my computer. But what about if I would send it unintentionally (cause I believe it is still somewhere on my iPhone) to someone else's smart phone and then they sync it with their windows OS? Apple should allow virus apps on iPhones to detect and remove malware before it reaches any other device. Also, many people on their Macs are getting the same error message during iTunes syncing and they have no clue how to resolve it nor they know what causes their iPhones not to be able to sync.

@Givmeabrek
That kind of humour is too literal for my taste.
 
MuseumVisitor said:
@ Applejuiced
My Virus scanning program did catch and deleted this malware from my computer. But what about if I would send it unintentionally (cause I believe it is still somewhere on my iPhone) to someone else's smart phone and then they sync it with their windows OS? Apple should allow virus apps on iPhones to detect and remove malware before it reaches any other device. Also, many people on their Macs are getting the same error message during iTunes syncing and they have no clue how to resolve it nor they know what causes their iPhones not to be able to sync.

@Givmeabrek
That kind of humour is too literal for my taste.
Click to expand...

Its not possible.
Such viruses cannot infect windows and spread in the iphones iOS.
And there is no need for anti virus apps on the iphone. Apple updates all security fixes with every iOS update and currently there is no malware or viruses for the iphone out there.
 
@Applejuiced
If it can go on my Mac, why would not be able to go on Windows?
If it came to my iPhone, why would not be able to go on someone else's smart phone?

And again, it causes iTunes to refuse to backup and sync. Although, maybe iTunes just want me to turn virus protection off on my Mac, which causes me to get this trojan to sit on my OS.
 
MuseumVisitor said:
@Applejuiced
If it can go on my Mac, why would not be able to go on Windows?
If it came to my iPhone, why would not be able to go on someone else's smart phone?

And again, it causes iTunes to refuse to backup and sync. Although, maybe iTunes just want me to turn virus protection off on my Mac, which causes me to get this trojan to sit on my OS.
Click to expand...

Because currently it cannot effect iOS.
There's nothing out there at the moment that can infect the latest iOS version on mobile devices.
Believe what you want though if you want to keep the tinfoil hat on :D
You can format your computer and restore your iPhone and setup as new to wipe everything clean.
Up to you.
 
  • Like
Reactions: Gathomblipoob
MuseumVisitor said:
Hi Guys,

Recently, I started having trouble backing up and syncing my iPhone with my Mac via iTunes. I kept getting an error message: "iTunes could not back up the iPhone because not enough free space is available on this computer" even though my new MacBook has 1.5TB space left. After hours of struggle (including the process of going through a recovery mode - reinstall os x - which it did not help) I realized that it may have to do with a trojan file that my “Virus Scanner Plus” was alarming me of every time I try to sync my iPhone with my Mac. And only if I turn “Virus Scanner” off and let the file in, I can sync my iPhone. So my only solution was to let the trojan into my computer and then after my iPhone is synced, I would to my Mac MobileSync -> Backup - and delete this infected_JS file called:

e332bd3fe863eb5a49b7191c72bf2abbdd218592

Is anyone of you aware of this JS:Trojan.JS.Downloader.FE that clearly is coming from my iPhone?
Is it malicious and how did it ever get into my iPhone? Is there anything else that I can do to get rid of this file from my iPhone (I did clean history and website data) but this trojan is keep being detected every time I try to sync my iPhone and my Mac via iTunes. So it's still there on my iPhone and Im avoiding to do a clean reset of my iPhone because the Im not so sure if I have a “clean” unaffected backup.



This is what it says in this questionable file:



[MOD NOTE]
Code has been removed by the moderation team. There's no reason to publicly post potentially malicious code in the forums.
Click to expand...


I had the exact same issue and I think I found the solution.I have a win 10 and I hope you can relate.

1. turn off all the virus protection and windows defenders and firewalls in ur pc.
2. back up iphone while antivirus and firewalls are off. the trojan will not stop backup process as antivirus and firewalls are off.
3. after back up (Show hidden files) and go to : C:\Users\yourname\AppData\Roaming\Apple Computer\MobileSync\Backup ,and see backup folder
4. Turn on antivirus and fire wall and scan the backed up folder for viruses
5. antivirus finds the trojan, click see details to see the trojan file name. for me it was a swift pay file in my izip app.
6. remove it from the backed up folder using defender
7.go to your iphone and search the virus file name and and remove it. In my case I removed the file inside the izip app. then I removed the app itself.
8. remove the backed up file.
9.GO BACK UP AGAIN Like a NORMAL Person
 
This thread was very helpful. I had a very similar situatiopn when backing up the iphone using itunes on Windows 10.
My Eset Nod32 detected a virus during the backup and deleted the infected files. This results in the message at the end of waiting for the backup to complete that tunes could not backup the iphone because an error occurred while reading from or writing to the iphone. I tried forever to find the file on the iphone, but couldn't find it until I read this thread. I opened Izip, deleted all my zip files and then I was able to backup as normal.
 
You must log in or register to reply here.
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.
Top Bottom
Back