>>Wanna see what the Shell.Application can do?
>
>Um, ok.
>
>>And what does IE4 have to do with the WSH anyway?
>
>I thought IE5 installed WSH. Plus I'm on Windows 95, I don't think Scripting ever got installed.
WSH first shipped with NT Option Pack 4; WSH 1.0 was an optional component of both Win98 and IE4, and some of the COM components may have landed on your system if you've accessed a Web site with client-side scripting through a WSH component (you can build COM objects using WSH) - especially SCRRUN.DLL, the scripting runtime. VB likely dropped Scripting.FileSystemObject on your system (it uses it for delivering extended file services), and it's reasonably certain that both the VB and Java VMs are there. Under Win9x, many of the common ActiveX controls are reasonably simple to exploit, too.
IE4 means that InternetExplorer.Application is available on your system, and being Win9x, forget about security...