MSSql Attack - MSSql.VO attack - Anyone know anything about this?

Does anyone know how these work? My friend's computer was hit by one last night, but cannot find much information about it. How does it happen? Is there anyway to track where it came from? (He uses Symantec) How do you prevent it? Does this mean there is a trojan on his machine? Thanks for your help!!