JS_ORKUT.A - Description and solution

ORKUTに感染するJavascriptのWormに関するウイルス検知が出てきていますね。

This malicious JavaScript may be dropped by other malware. It may be hosted on a Web site and run when a user accesses the said Web site.

This malicious JavaScript searches for target recipients in a compromised Orkut account. It then sends a scrap object to its taget recipients.

When an affected user views the said scrap object, this malicious JavaScript automatically executes itself by performing the same routine mentioned above. However, it can only execute when an affected user logs into an Orkut scrapbook to view the scrap object sent by this malicious JavaScript.

screenshot