Here's a suggestion... I've moved Format, Deltree, and a few other nefarious commands into a subfolder with a non-standard name of c:\windows\command\, so bad batch files can't do much...
Can't you do a similar thing with the VBS scripting files? So long as they aren't in a normal area or in a directory that is included in a path= statement...
