Hello,
My idea would be to have the attachment system read the name of the file the user was uploading to the site and check to see if it is a VB script name. If so deny the upload explaining that you cannot attach VB scripts to the site.
I'm pretty sure this would be reletively easy to do and would help the moderators out tremendously. Sometimes mods don't catch the script being online in large threads for quite some time.
Just a thought.