F-Secure
Tools
Cabir.D
| Name : | Cabir.D |
| Category: | Malware |
| Type: | Virus |
| Platform: | Win32 |
Summary
Cabir.D is a minor variant of Cabir.B. The only significant differences are that the Cabir.D displays different text on the start dialog when the worm starts to execute.The Cabir.D spreads as MYTITI.SIS instead of Cabir.SIS. Cabir.D displays text "Mytiti" while Cabir.B displays text that contains just "Caribe". 
Disinfection
Disinfection
F-Secure Mobile Anti-Virus will detect the Cabir.D and delete the worm components. After deleting worm files you
can delete this directory:
c:\system\symbiansecuredata\mytitisecuritymanager\
If your phone is infected with Cabir.D and you cannot install files over bluetooth, you can download F-Secure Mobile Anti-Virus directly to your phone
1. Open web browser on the phone
2. Go to http://mobile.f-secure.com
3. Select link "Download F-Secure Mobile Anti-Virus" and then select phone model
4. Download the file and select open after download
5. Install F-Secure Mobile Anti-Virus
6. Go to applications menu and start Anti-Virus
7. Activate Anti-Virus and scan all files
F-Secure Mobile Anti-Virus will detect the Cabir.D and delete the worm components. After deleting worm files you
can delete this directory:
c:\system\symbiansecuredata\mytitisecuritymanager\
If your phone is infected with Cabir.D and you cannot install files over bluetooth, you can download F-Secure Mobile Anti-Virus directly to your phone
1. Open web browser on the phone
2. Go to http://mobile.f-secure.com
3. Select link "Download F-Secure Mobile Anti-Virus" and then select phone model
4. Download the file and select open after download
5. Install F-Secure Mobile Anti-Virus
6. Go to applications menu and start Anti-Virus
7. Activate Anti-Virus and scan all files
Additional Details
Cabir.D is a minor hexedit variant of Cabir.B, with the exception of new filename and the different text displayed in worm will start to execute. Cabir.D behaves identically as Cabir.B