Mawanella.vbs

Aliases: VBS.Mawanella

VBSWG.Z is an encrypted script worm written in Visual Basic Script spreading in the environment of email client Microsoft Outlook.  It arrives on computer in the form of an email message with subject "Mawanella" with attached file Mawanella.vbs.  The message body contains the text  "Mawanella is one of the Sri Lanka's Muslim Village".
Upon activation of the file in the message attachment the worm decodes itself and creates its copy in the directory WINDOWS/SYSTEM.  Subsequently it tries to send out its copies to all email addresses it can find in the Outlook address book.  If a computer does not have MS Outlook installed the worm displays a message:

At the end of its activity the worm displays a window with politically motivated text:

PROTECT YOUR COMPUTER!
ESETs NOD32 antivirus software provides comprehensive, easy-to-use, and affordable protection from todays and tomorrows threats. We put the malware expert inside the software, so you don’t have to become one.

DOWNLOAD ESET NOD32 ANTI VIRUS SOFTWARE