.vbs

[Gintaras]

A few days ago I received e-mail with file attached .vbs .
If I understand correctly, it's Visual Basic Script file.
I scanned with Inoculate IT, but didn't detect no virii.

Can someone explain me more about .vbs?

TIA

Gintaras

[M. A. Dockter]

It was a Visual Basic Script. From what I've seen 100% of these are virii unless you specifically ASKED someone for source in VBScript.

[Statica]

Not all email transmitted .vbs scripts are virii, there are some that are generated by word too when sending docs thru email, and a LOT that is spam too, plain harmless spam, ranging from text to generate text from seeming gibberish to fool filters.

[reboot]

Not all .vbs files are viruses, but 100% of unsolicited .vbs files probably ARE. That or spam, like Statica mentioned.
I have a small .vbs file I use to reclaim RAM from the lousy apps that don't release it when closed, and it's NOT a virus, although about 50% of all anti-virus scanners I've tried, think it is.
Simply put VBS (Visual Basic Script) is a computer language. It's recognizable by windows (default when installing windows), and can be disabled (uninstalled) through control panel, add/remove programs, Windows setup tab, Accessories section, it's called "Windows Scripting Host".
For those of you who have, or will be (it's just a matter of time) hit with melissa, or any of the other less malicious trojans, removing the Windows Scripting Host will usually stop the thing cold. Even if you click on that attachment of (insert favourite celebrity nude here), if you don't have Scripting Host installed, windows will ask if you want to install it to view the "picture". Don't.

[Gintaras]

Thanks everyone for info.

The attachment I got, it was something about winning Mil. $$$, and the file was called something like "milion.vbs".

Inoculate IT didn't detect as a virus infected file.

Thanks again,

Gintaras

[reboot]

Just right click it, open it using Notepad, and view the contents. You'll be able to tell if it's legit fairly quick, and just opening (viewing) it won't infect anything.

[Statica]

just save the attachment if you have it as a txt file and open in notepad, if you know any programing lingo it should be pretty "basic" :)
Or better yet read the mails thru a telnet session if u still have it.
Basically most spam filters, will check for trigger words that classify it as a spam, there are VBS scripts that will now do a simple translation even something along the lines of a bunch of text say like
"
Rnea lbhefrys zvyyvbaf
"
and then a "decryption sequence that rearranges" text back to what it was .. say in this case a 13 character shift [which is common esp in usenet messages].