Threat Encyclopedia

Selected viruses, spyware, and other threats: sorted alphabetically

VBSWG.Z

Aliases: VBS.Mawanella

VBSWG.Z is an encrypted script worm written in Visual Basic Script spreading in the environment of email client Microsoft Outlook.  It arrives on computer in the form of an email message with subject "Mawanella" with attached file Mawanella.vbs.  The message body contains the text  "Mawanella is one of the Sri Lanka's Muslim Village".
Upon activation of the file in the message attachment the worm decodes itself and creates its copy in the directory WINDOWS/SYSTEM.  Subsequently it tries to send out its copies to all email addresses it can find in the Outlook address book.  If a computer does not have MS Outlook installed the worm displays a message:

At the end of its activity the worm displays a window with politically motivated text:

© 1992-2004 Eset s.r.o. All rights reserved. No part of this encyclopedia may be reproduced, transmitted or used in any other way in any other form or by any means without prior permission from Eset.