Help/Support Remove Xcodeghost

[Zorg 5 8]

Hi all!

 

I have a little problem with Xcodeghost.

My ISP is sending me mails that this malware is active on one of my phones.

I know what xcodeghost is and that there us a list of likely infected apps. But i have none of them. I must have downloaded another infected app/tweak from cydia.

Can somebody help me get rid of it? The pangu Xcodeghost removal tool isnt online anymore...

 

Thx in advance

Zorg

[Rook 563.3k iPad Pro (2nd gen) 17.4 Donor]

You should debug your traffic and see when xcode ghost starts contacting their servers when you do x thing or open x app on your device.

[Vegito 288 iPhone 7 11.2.1]

You should debug your traffic and see when xcode ghost starts contacting their servers when you do x thing or open x app on your device.

How can i remove it , can you please help me out?

[Rook 563.3k iPad Pro (2nd gen) 17.4 Donor]

How can i remove it , can you please help me out?

Remove the tweak or app that has it.

[Vegito 288 iPhone 7 11.2.1]

Remove the tweak or app that has it.

i monitored it , it's sending requests to inmobicdn.net/banners and ShowAds, how could i know which app or tweak is infected.

[Rook 563.3k iPad Pro (2nd gen) 17.4 Donor]

i monitored it , it's sending requests to inmobicdn.net/banners and ShowAds, how could i know which app or tweak is infected.

That's not XcodeGhost, that's something else.

[Vegito 288 iPhone 7 11.2.1]

That's not XcodeGhost, that's something else.

but it covers up whole screen in showing me advertise, should i send you the links which it is showing in Flexible tweak?

[Rook 563.3k iPad Pro (2nd gen) 17.4 Donor]

but it covers up whole screen in showing me advertise, should i send you the links which it is showing in Flexible tweak?

Run top in Terminal and see which tweaks are runnin

[Vegito 288 iPhone 7 11.2.1]

Run top in Terminal and see which tweaks are running

This is what it shows --> http://goo.gl/6RkaNM

[Rook 563.3k iPad Pro (2nd gen) 17.4 Donor]

This is what it shows --> http://goo.gl/6RkaNM

Run it on putty so you can see more and find which process you need to kill in order for the ads to stop.