It has been commonly observed that user accounts are easily compromised through phishing schemes, trojans and spywares. As a starting point, the following steps are recommended:-

• Avoid sharing your username, password and personal information secret and better chane your password regularly. Use a password combination (with a minimum password length of atleast 8 characters) with an uppercase, lowercase, a digit and some special characters making it much harder for someone to guess your password.
• Never paste a URL or a javascript when logged into orkut regardless of what it claims to do. Never click on links in emails that claims to be from Gmail or Orkut.
• Don’t enter your Google Account username and password on sites other than orkut.com and other Google networks sites.
• Sign out when you are done: Don’t forget to click the Logout link at the top of the page when you’re done with using orkut. This should be strictly followed when using a orkut from a shared computer.

Do 1st ~
*************
[1] Change your Google Account Password regulalrly and never use that password again in future.
[2] Change your Security Question immediately.
[3] Unjoin that communities joined automatically without your knowledge
[4] You can see 1 friend automatically added to your friend list, find him  and remove from your list.

~ Do Never ~
****************
[1] Do not run any script while orkutting
[2] Do not click any link from orkut
[3] Do not post ORKUT-SCRAPS from outside ORKUT (e.g.: http://www.OrkutStyle.com | http://www.123orkut.com |

 http://www.Orkut-Scrapping.com)
[4] Do not use other sites to access ORKUT or GMAIL. (e.g.: http://www.PowerScrap.com | http://www.Way2SMS.com)