In Outlook and Outlook express, there is an icon that is displayed if the email contains VBS. This icon looks like a little tornado. If you see this icon, do NOT click on it, as that will run it. I've followed this rule for some time and even received infected emails, but never been bitten by them.


>
>As mentioned elsewhere, the program named is part of Win98.
>
>The only way a WSH virus gets activated is to "open" as opposed to "edit" it. One thing I'd strongly recommend is for you to check out the HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run registry key. Find the files mentioned therein and check them to see when they were created. If you find on that was created on the date the virus was launched, you've probably found the real culprit. I doubt if it's wormed its way into your backups. There may be a program running that does the corruption when you try to restore.