THREAT MONITOR
Eliminate all VBS worms and viruses
Stephen Mencik
05.29.2001
Rating: -4.50- (out of 5) Hall of fame tip of the month winner
This tip was submitted to the SearchSecurity Tip Exchange Contest by user Stephen Mencik. Let other users know how useful it is by rating the tip below.
There is a very simple way for Windows users (95, 98, ME, NT or 2000) to eliminate completely the threat of "accidentally" executing a VBS attachment to an e-mail.
Do the following:
[1] Go to any open Windows Explorer or File Manager window.
[2] On the pull-down menus select "Options" on the "View" pull-down.
[3] Select the "File Types" tab.
[4] Scroll down until you see the .vbs file type.
[5] For each of them, highlight the entry and select "Edit."
[6] Highlight "Open" and select "Edit."
[7] Change the "application use to perform action" from "wscript.exe" to the path name
To continue reading for free, register below or login
To read more you must become a member of SearchSecurity.com
for where "notepad.exe" is located. This is likely either "C:windowsnotepad.exe" or "C:WINNTnotepad.exe." You can use the file find feature to locate the proper path.
[8] Once changed, click "OK" and "Close."
[9] Repeat for the .vbe file type.
By doing this, if you ever "accidentally" click on a worm or virus written in Visual Basic, it will pop open in notepad rather than executing. This will stop all of them, even if your antivirus software doesn't. This does not mean you don't need antivirus software, as it does nothing for other types of malicious code (.exe, .com, etc.). It also does not prevent those who have need to run Visual Basic scripts from running them. It does mean they will need to use the "Open With" feature of the right mouse button, rather than simply double-clicking the icon.
|
|
Rate this Tip
|
To rate tips, you must be a member of SearchSecurity.com.
Register now
to start rating these tips. Log in if you are already a member.
|
DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.
|
|
|
|
|
|
|
