Afci005.html virus in Orkut

 

 

Some days ago ( around the end of October 2010), most of the Orkut users faced a serious problem while using Orkut. A new practice of intrusion has been detected on Orkut in which the Orkut pages are being re-directed to some fake Orkut login pages made on some dangerous third party websites. Also users are getting a file named afci005.HTML to download in their web browsers like Mozilla Firefox, Google chrome, IE etc.

The re-directed new Orkut page in third party Website will exactly look like Orkut login page. Orkut users will enter their username and password by thinking that it’s the original orkut login page, their username and password will be send to some hacker and later their account will be hacked. This is actually called Orkut Phising.

What is afci005.html?

afci005.html is actually a Trojan program “Trojan.JS.Redirector.ar”. By analyzing the source code of afci005.html, I came to know that it’s a dangerous Javascript which is created for attacking the Google’s Adsense advertising program.

How to fix afci005.html?

Most of the experts are recommending to scan and fix virus issues in your PC, but I’m sure this is not going to help you. This is because the virus script is not acting from your PC, but it’s from Orkut server. So only Orkut team can fix this.

To be safe, the best thing is not to use orkut communities for some days until orkut team fix this bug. Also if You are the Owner of any Orkut community, Edit your community and select only the Owners and Moderators can create new forum topics and then click Update. This is to prevent the posting of this virus script by some one on your community. It seems this Orkut Virusafci005.html issue is only with the Older Version of Orkut, so try to use only the new version of Orkut. Also you can safely browse orkut from the mobile version of orkut:  m.orkut.com

Note: After login orkut by using the new version of Orkut, try to remove any newly installed Orkut application that you have suspected to be installed automatically without your permission.