Mozilla and Orkut-hating virus!

This time, we have a virus which hates Orkut and Mozilla Firefox! Mozban virus does not allow PC user to Firefox browser and to open Orkut website. This virus makes use of AutoHotKey to do this and also to replicate itself. Mozban spreads through secondary storage devices like USB drives, CDs etc.
Here are the screen shots of message boxes displayed by the virus when Orkut website is opened or Firefox is launched:



Svchost.exe is nothing but renamed AutoHotKey program! Mozban creates a folder named heap41a in the root drive, and files listed below:
2.mp3
drivelist.txt
Icon.ico
offspring
reproduce.txt
script1.txt
std.txt
svchost.exe

And, the folder offspring contains:
MicrosoftPowerPoint.exe
autorun.inf

Files std.txt, script1.txt and reproduce.txt contain AutoHotKey scripts, which are executed by svchost.exe (renamed AutoHotKey).

Here are the screen shots Jotti Malware Scan results of files - svchost.exe and MicrosoftPowerPoint.exe - dropped by the virus: