Malicious Traffic Detection

Question

I followed these directions&hellip;.. www.sophos.com/.../121665.aspx and was told the detected components of the virus/spyware is "wscript.exe". Why doesn&rsquo;t it tell me the problem is with &ldquo;mtd.vbs&rdquo; ?

CraigJones · Accepted Answer

It's because mtd.vbs uses wscript.exe (Windows-Based Script Host) to execute, this means the actual running application is wscript.exe and the detection quite rightly is against this. In a real world scenario the detection would be against an actual piece of Malware rather than a vbs script. 
 
 Hope this helps. 
 
 Craig