a friend is working on de-constructing a virus that arrived in his email, so far we can view the source code as far as the vbs script however theres the actual excutable within the vbs that is what were trying to extract the source from, it appears the excutable was constructed with a msftedit generator, a google search hasn't been of any help.