Win32/Bagle.CI The Trojan is supposed to block access to security software update servers , such as those providing antivirus updates. The Trojan's origin is from the Ukraine, according to Ukraine text inside the binary. The word "Reliz", found in the Trojan is very typical for Trojans of Russian/Ukrainian/Belarusian origin.
Win32/Mydoom.B On Windows NT/2000/XP it modifies the file %system%\drivers\etc\hosts This modification will make the update servers of several anti-virus companies inaccessible to the infected computer. The detection of Win32/MyDoom.B using sample is added since version 1.613.
