Hi element!

I can only see the .plist file you told me to find. There is no bluetool file on the folder you specify (private/etc). Will it appear if I uninstall MobileSubstrate? I didn't do it because I'm not being able to retrieve MD5 from any file with WinSCP. Unfortunately, my MacBook is in tech support, so, for now, I only have access to Windows-based PC (just giving you a heads up in case you tell me to follow some procedure). If you could tell me how to get MD5 from windows (wouldn't mind using cable, of course), it'd be great. If I find a way to do it by myself, I'll post the checksum as soon as I get it.

Yes, I can SSH my phone, so it seems the malware's been removed. My phone is still slow, though. Don't have a clue on that. I want to restore badly, but there's no non-beta JB for 4.3 and I only have those SHSH, so restoring's not an option for now.

Thanks!

turns out I was looking in the wrong place, bluetool is apparently old (was present on iPhone2G).
Nevermind those files, just uninstall MobileSubstrate, reboot and check if the problem persists. If it does, please capture the log the exact same way you did before, but with MobileSubtrate uninstalled.

Can't find MobileSubstrate to uninstall it. Tried even with developer mode in Cydia, but can't find it (not even for installing it). Googled and didn't find a way to do it. Can you please help me here?

Also I read that SBSettings uses MobileSubstrate, so it should be installed, but for some reason not showing up in Cydia.

Find a package that depends on MobileSubstrate (SBSettings, for example) and uninstall that, you will see it will automatically add MobileSubstrate to the "Remove" list.

If i'm not mistaken, this time the log was MUCH shorter. Don't know what it means.


Tue Mar 22 21:58:44 unknown kernel[0] <Debug>: BTServer[36] Builtin profile: BlueTool (sandbox)
Tue Mar 22 21:58:44 unknown SpringBoard[31] <Warning>: BTM: received BT_LOCAL_DEVICE_POWER_STATE_CHANGED event
Tue Mar 22 21:58:44 unknown Preferences[149] <Warning>: BTM: received BT_LOCAL_DEVICE_POWER_STATE_CHANGED event
Tue Mar 22 21:58:44 unknown SpringBoard[31] <Warning>: BTM: posting notification BluetoothPowerChangedNotification
Tue Mar 22 21:58:44 unknown Preferences[149] <Warning>: BTM: posting notification BluetoothPowerChangedNotification
Tue Mar 22 21:58:44 unknown Preferences[149] <Warning>: BTM: BTLocalDeviceGetPairedDevices returned 0 devices
Tue Mar 22 21:58:44 unknown Preferences[149] <Warning>: BTM: BTLocalDeviceGetConnectingDevices returned 0 devices
Tue Mar 22 21:58:44 unknown Preferences[149] <Warning>: BTM: setting device scanning enabled
Tue Mar 22 21:58:44 unknown Preferences[149] <Warning>: BTM: setting discoverable status enabled
Tue Mar 22 21:58:44 unknown mediaremoted[22] <Warning>: BTM: received BT_LOCAL_DEVICE_POWER_STATE_CHANGED event
Tue Mar 22 21:58:44 unknown mediaremoted[22] <Warning>: BTM: posting notification BluetoothPowerChangedNotification
Tue Mar 22 21:59:18 unknown Preferences[149] <Warning>: BTM: setting device scanning disabled
Tue Mar 22 21:59:18 unknown Preferences[149] <Warning>: BTM: stopping discovery agent
Tue Mar 22 21:59:18 unknown com.apple.BTServer[36] <Notice>: DeviceTree speed = 3000000
Tue Mar 22 21:59:18 unknown com.apple.BTServer[36] <Notice>: Opening com.apple.uart.bluetooth @ 3000000 baud.
Tue Mar 22 21:59:18 unknown com.apple.BTServer[36] <Notice>: bluetooth wake is now ON
Tue Mar 22 21:59:18 unknown com.apple.BTServer[36] <Notice>: Issued HCI Reset
Tue Mar 22 21:59:18 unknown com.apple.BTServer[36] <Notice>: bluetooth wake is now OFF
Tue Mar 22 21:59:18 unknown mediaremoted[22] <Warning>: BTM: received BT_LOCAL_DEVICE_POWER_STATE_CHANGED event
Tue Mar 22 21:59:18 unknown mediaremoted[22] <Warning>: BTM: posting notification BluetoothPowerChangedNotification
Tue Mar 22 21:59:18 unknown SpringBoard[31] <Warning>: BTM: received BT_LOCAL_DEVICE_POWER_STATE_CHANGED event
Tue Mar 22 21:59:18 unknown SpringBoard[31] <Warning>: BTM: posting notification BluetoothPowerChangedNotification
Tue Mar 22 21:59:18 unknown Preferences[149] <Warning>: BTM: received BT_LOCAL_DEVICE_POWER_STATE_CHANGED event
Tue Mar 22 21:59:18 unknown Preferences[149] <Warning>: BTM: posting notification BluetoothPowerChangedNotification
Tue Mar 22 21:59:18 unknown Preferences[149] <Warning>: BTM: setting discoverable status disabled
Tue Mar 22 21:59:19 unknown kernel[0] <Debug>: BTServer[36] Builtin profile: BlueTool (sandbox)
Tue Mar 22 21:59:28 unknown Preferences[149] <Warning>: BTM: setting discoverable status disabled

Okay, let's try this, SSH into your iPhone and type the following commands: (without the quotes)
"chown root:wheel /usr/sbin/BlueTool"
"chmod +x /usr/sbin/BlueTool"
"md5sum /usr/sbin/BlueTool" > Post the result

After that, reboot and try again. If the problem persists, re-capture the log and post :p

The result was:

518de8ac0a611c1dc319d0fe31ca68c0 /usr/sbin/BlueTool

Will reboot and give you a heads up.

Alright. No luck on discovering BT devices after rebooting. Posting new log:

Tue Mar 22 22:36:02 fLn mediaremoted[22] <Warning>: BTM: received BT_LOCAL_DEVICE_POWER_STATE_CHANGED event
Tue Mar 22 22:36:02 fLn mediaremoted[22] <Warning>: BTM: posting notification BluetoothPowerChangedNotification
Tue Mar 22 22:36:02 fLn SpringBoard[31] <Warning>: BTM: received BT_LOCAL_DEVICE_POWER_STATE_CHANGED event
Tue Mar 22 22:36:02 fLn SpringBoard[31] <Warning>: BTM: posting notification BluetoothPowerChangedNotification
Tue Mar 22 22:36:02 fLn Preferences[147] <Warning>: BTM: received BT_LOCAL_DEVICE_POWER_STATE_CHANGED event
Tue Mar 22 22:36:02 fLn Preferences[147] <Warning>: BTM: posting notification BluetoothPowerChangedNotification
Tue Mar 22 22:36:02 fLn Preferences[147] <Warning>: BTM: BTLocalDeviceGetPairedDevices returned 0 devices
Tue Mar 22 22:36:02 fLn Preferences[147] <Warning>: BTM: BTLocalDeviceGetConnectingDevices returned 0 devices
Tue Mar 22 22:36:02 fLn Preferences[147] <Warning>: BTM: setting device scanning enabled
Tue Mar 22 22:36:02 fLn Preferences[147] <Warning>: BTM: setting discoverable status enabled
Tue Mar 22 22:36:03 fLn kernel[0] <Debug>: BTServer[36] Builtin profile: BlueTool (sandbox)
Tue Mar 22 22:36:29 fLn configd[28] <Debug>: usbeth_handle_interfaces_found:666 found iointerface
Tue Mar 22 22:36:29 fLn configd[28] <Debug>: usbeth_handle_interface_found:565 handling interface 0x1686b
Tue Mar 22 22:36:29 fLn SpringBoard[31] <Warning>: NO WIFI BARS: current WiFi network name is (null)
Tue Mar 22 22:36:30 fLn kernel[0] <Debug>: AppleBCMWLANNetManager::handleDeauth(): status = 0, reason = 7, flags = 0x0, authtype = 0, addr = 00:14:bf:49:e9:9e
Tue Mar 22 22:36:30 fLn kernel[0] <Debug>: AppleBCMWLANNetManager::leaveNetworkAsync(): kDeauthdCurrNetwork already set. Skipping call to leaveNetworkASync
Tue Mar 22 22:36:30 fLn kernel[0] <Debug>: AppleBCMWLAN Left BSS: @ 0x898dc000, BSSID = 00:14:bf:49:e9:9e, rssi = -49, rate = 54 (100%), channel = 6, encryption = 0x4, ap = 1, failures = 0, age = 115, ssid[ 6] = "Patrol"
Tue Mar 22 22:36:30 fLn kernel[0] <Debug>: AirPort: Link Down on en0. Reason 1 (Unspecified).
Tue Mar 22 22:36:30 fLn configd[28] <Debug>: CaptiveNetworkSupport:CaptiveHandleNetworkChanged: 2325 key: State:/Network/Service/71150668-15A8-4304-B75E-BA1EAE603942/IPv4
Tue Mar 22 22:36:30 fLn configd[28] <Debug>: CaptiveNetworkSupport:CaptiveHandleInterfaceChange d:2191 Interface = en0, primaryServiceID =NULL
Tue Mar 22 22:36:30 fLn configd[28] <Debug>: CaptiveNetworkSupport:CaptiveSCDisableServiceByID: 361 Disabled 71150668-15A8-4304-B75E-BA1EAE603942
Tue Mar 22 22:36:30 fLn configd[28] <Notice>: CaptiveNetworkSupport:CaptivePublishState:1012 en0 - PreProbe
Tue Mar 22 22:36:30 fLn configd[28] <Debug>: CaptiveNetworkSupport:CaptiveSCDisableServiceByID: 361 Disabled 71150668-15A8-4304-B75E-BA1EAE603942
Tue Mar 22 22:36:30 fLn configd[28] <Notice>: network configuration changed.
Tue Mar 22 22:36:30 fLn configd[28] <Info>: hostname (prefs) = fLn
Tue Mar 22 22:36:50 fLn Preferences[147] <Warning>: BTM: setting device scanning disabled
Tue Mar 22 22:36:50 fLn Preferences[147] <Warning>: BTM: stopping discovery agent
Tue Mar 22 22:36:50 fLn com.apple.BTServer[36] <Notice>: DeviceTree speed = 3000000
Tue Mar 22 22:36:50 fLn com.apple.BTServer[36] <Notice>: Opening com.apple.uart.bluetooth @ 3000000 baud.
Tue Mar 22 22:36:50 fLn com.apple.BTServer[36] <Notice>: bluetooth wake is now ON
Tue Mar 22 22:36:50 fLn com.apple.BTServer[36] <Notice>: Issued HCI Reset
Tue Mar 22 22:36:50 fLn com.apple.BTServer[36] <Notice>: bluetooth wake is now OFF
Tue Mar 22 22:36:50 fLn SpringBoard[31] <Warning>: BTM: received BT_LOCAL_DEVICE_POWER_STATE_CHANGED event
Tue Mar 22 22:36:50 fLn Preferences[147] <Warning>: BTM: received BT_LOCAL_DEVICE_POWER_STATE_CHANGED event
Tue Mar 22 22:36:50 fLn SpringBoard[31] <Warning>: BTM: posting notification BluetoothPowerChangedNotification
Tue Mar 22 22:36:50 fLn Preferences[147] <Warning>: BTM: posting notification BluetoothPowerChangedNotification
Tue Mar 22 22:36:50 fLn Preferences[147] <Warning>: BTM: setting discoverable status disabled
Tue Mar 22 22:36:50 fLn mediaremoted[22] <Warning>: BTM: received BT_LOCAL_DEVICE_POWER_STATE_CHANGED event
Tue Mar 22 22:36:50 fLn mediaremoted[22] <Warning>: BTM: posting notification BluetoothPowerChangedNotification
Tue Mar 22 22:36:51 fLn kernel[0] <Debug>: BTServer[36] Builtin profile: BlueTool (sandbox)

That's all I got. Hope this thing doesn't blow up haha

Oh BTW, can I install MobileSubstrate (and all related stuff) now? Or it's better that I keep those uninstalled?

Yes, you can install MobileSubstrate... I am not sure what to do right now, I am sorry, I will research and post back whatever I find out.