[Paul]

Might not work for some people because the scripting host is disabled, since a lot of real viruses use vbs scripts to run (since it is vb there is lot you can do with it, copy/delete files/edit registry etc)