Trojan on my iPhone

Discussion in 'iPhone' started by MuseumVisitor, Feb 5, 2017.

  1. MuseumVisitor macrumors member

    Nov 20, 2010
    Hi Guys,

    Recently, I started having trouble backing up and syncing my iPhone with my Mac via iTunes. I kept getting an error message: "iTunes could not back up the iPhone because not enough free space is available on this computer" even though my new MacBook has 1.5TB space left. After hours of struggle (including the process of going through a recovery mode - reinstall os x - which it did not help) I realized that it may have to do with a trojan file that my “Virus Scanner Plus” was alarming me of every time I try to sync my iPhone with my Mac. And only if I turn “Virus Scanner” off and let the file in, I can sync my iPhone. So my only solution was to let the trojan into my computer and then after my iPhone is synced, I would to my Mac MobileSync -> Backup - and delete this infected_JS file called:


    Is anyone of you aware of this JS:Trojan.JS.Downloader.FE that clearly is coming from my iPhone?
    Is it malicious and how did it ever get into my iPhone? Is there anything else that I can do to get rid of this file from my iPhone (I did clean history and website data) but this trojan is keep being detected every time I try to sync my iPhone and my Mac via iTunes. So it's still there on my iPhone and Im avoiding to do a clean reset of my iPhone because the Im not so sure if I have a “clean” unaffected backup.

    This is what it says in this questionable file:

    [MOD NOTE]
    Code has been removed by the moderation team. There's no reason to publicly post potentially malicious code in the forums.
  2. T'hain Esh Kelch macrumors 601

    T'hain Esh Kelch

    Aug 5, 2001
    Its a Windows only trojan. It can't do anything on your phone.
  3. MuseumVisitor thread starter macrumors member

    Nov 20, 2010
    Sorry guys for the posted code. I was extremely intrigued with the presence of this trojan file on a iPhone and was hoping that someone can quickly build a protection against it if they are fully aware of the the way how it was built. I thought that if its not inside of the system it would not hurt since it's only read as a plain text on a web site. Hoping also that Apple would be able to catch the app that created it (again, I cleaned Safari iOS and the file is still there - which Im concluding is because of the fact that is part of an app). Otherwise, people will be installing them on their phones without knowing.

    I may be lucky to have downloaded it on a Mac (thank you T'hain for your response!), but what about all those people who are syncing their iPhone with PCs?

    The question still remains why iTunes was refusing to sync if Virus protection program is continuously scanning for bad things?
  4. simonmet macrumors 68000


    Sep 9, 2012
    Could it be in your email or messages?

    Seems unlikely but maybe it could've been introduced by a dodgy app, especially one that has file storage capabilities.

    Where exactly is the Trojan file stored on your computer when you allowed the backup? If in the Phone's backup location then where in particular? This may give some clues.

    What if you backup your phone, then reinstall it after deleting the Trojan from the backup directory?

    Failing that you may need to copy a list of your installed applications, reset the phone and delete the backup and completely set it up as new. Also delete and start redownloading all your applications and try installing them several at a time.

    Nobody wants a Trojan even if it's a PC one.
  5. MuseumVisitor thread starter macrumors member

    Nov 20, 2010
    Hi Simonmet,
    1. The questionable file was put in my user - library - application support - mobilesync - backup - my iphone - e3 folder
    2. Im afraid to reset the phone because my backup may not be "healthy" since it was so hard to make it and Im about to go on a trip. I have no time to manually add the things to my iPhone.
    3. Im not sure if it can be from an email. Im never sync my emails via may Mac - iTunes does not have this command to bring the emails in. However, I do have all the same email messages coming from my internet provider, but I do not recall that my Mac ever signalled that I have trojan in my email.
  6. Stevessvt macrumors 6502

    Jul 2, 2010
    I have a Trojan on my phone.

    Attached Files:

  7. Brandonjr36 macrumors 68000


    Sep 12, 2016
    This kind of trojan?

    Attached Files:

  8. Applejuiced macrumors Westmere


    Apr 16, 2008
    At the iPhone hacks section.
    Download malware bytes and clean your computer.
    Its a windows infection and not something that can harm your iPhone.
  9. Givmeabrek macrumors 68040


    Apr 20, 2009
    He, he, I thought you had a condom on your phone to make it waterproof or safe from viruses etc. and was looking for the pic. :)
  10. MuseumVisitor thread starter macrumors member

    Nov 20, 2010
    @ Applejuiced
    My Virus scanning program did catch and deleted this malware from my computer. But what about if I would send it unintentionally (cause I believe it is still somewhere on my iPhone) to someone else's smart phone and then they sync it with their windows OS? Apple should allow virus apps on iPhones to detect and remove malware before it reaches any other device. Also, many people on their Macs are getting the same error message during iTunes syncing and they have no clue how to resolve it nor they know what causes their iPhones not to be able to sync.

    That kind of humour is too literal for my taste.
  11. Applejuiced macrumors Westmere


    Apr 16, 2008
    At the iPhone hacks section.
    Its not possible.
    Such viruses cannot infect windows and spread in the iphones iOS.
    And there is no need for anti virus apps on the iphone. Apple updates all security fixes with every iOS update and currently there is no malware or viruses for the iphone out there.
  12. MuseumVisitor thread starter macrumors member

    Nov 20, 2010
    If it can go on my Mac, why would not be able to go on Windows?
    If it came to my iPhone, why would not be able to go on someone else's smart phone?

    And again, it causes iTunes to refuse to backup and sync. Although, maybe iTunes just want me to turn virus protection off on my Mac, which causes me to get this trojan to sit on my OS.
  13. Applejuiced macrumors Westmere


    Apr 16, 2008
    At the iPhone hacks section.
    Because currently it cannot effect iOS.
    There's nothing out there at the moment that can infect the latest iOS version on mobile devices.
    Believe what you want though if you want to keep the tinfoil hat on :D
    You can format your computer and restore your iPhone and setup as new to wipe everything clean.
    Up to you.
  14. Jimmy James macrumors 601

    Jimmy James

    Oct 26, 2008
    I thought you accidentally put a condom on your phone after "activities".
  15. aelighas macrumors newbie

    Nov 24, 2017

    I had the exact same issue and I think I found the solution.I have a win 10 and I hope you can relate.

    1. turn off all the virus protection and windows defenders and firewalls in ur pc.
    2. back up iphone while antivirus and firewalls are off. the trojan will not stop backup process as antivirus and firewalls are off.
    3. after back up (Show hidden files) and go to : C:\Users\yourname\AppData\Roaming\Apple Computer\MobileSync\Backup ,and see backup folder
    4. Turn on antivirus and fire wall and scan the backed up folder for viruses
    5. antivirus finds the trojan, click see details to see the trojan file name. for me it was a swift pay file in my izip app.
    6. remove it from the backed up folder using defender
    7.go to your iphone and search the virus file name and and remove it. In my case I removed the file inside the izip app. then I removed the app itself.
    8. remove the backed up file.
    9.GO BACK UP AGAIN Like a NORMAL Person
  16. mcdj macrumors G3


    Jul 10, 2007
    You have a virus known as cl.own.

Share This Page