A repacked version of Cabir.B Symbian worm has been found on Chinese web portal. The repacked sample contains binaries that are fully indetical to original Cabir.B so it's not a new variant. However the new SIS installation file contains different settings as the one created by Cabir.B, which cause it to install the worm into different directory and display pop-up text during installation.

This repacked version is detected by F-Secure Mobile Anti-Virus for Series 60 without any need for database updates.

Thanks for Alex Lucic for notifying us about the repacked version.