looking for "VBScript.Encode",
go find scrdec15.exe under /files/security