Vulnerability Development mailing list archives
Re: The Million Dollar Solution
From: vwg () VWGNET F9 CO UK (Vince Gittins)
Date: Sat, 6 May 2000 20:37:52 GMT
Thats what I did where I work (1200 user network outlook/exchange, hit by youknowwhat.vbs Thur 10:35am), set .vbs to associate with wordpad, if any user launches ANY .vbs attachment it just displays it. Safe.
What if you set the default action in Windoze to edit .vbs, .vba, .js, ..wsc, .vbe, and .jse files. Then when they execute, it would bring up
the
default editor for that file type? My 2 cents. -----Original Message----- From: VULN-DEV List [mailto:VULN-DEV () SECURITYFOCUS COM]On Behalf Of Matthew Harmon Sent: Friday, May 05, 2000 8:34 PM To: VULN-DEV () SECURITYFOCUS COM Subject: [VULN-DEV] The Million Dollar Solution -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Everyone has been scrambling east and west, north and south trying to find the answer to these VBS viruses, the answer is not eMail filtering, it's not better firewalls, or failing members of the FBI community. It is a file called WScript.Exe A batch (.BAT) file with these two lines will deal with this problem: ren %SystemRoot%\system32\wscript.exe wscript.sav ren c:\windows\wscript.exe wscript.sav If you get rid of this engine, then all Visual Basic Scripts cannot be run. More information can be found about this file on the Microsoft Knowledge Base. I haven't seen this on BugTraq or Vuln-Dev yet, hope it helps you out! Sincerely, The Network Support Team of Playback Media, Inc. Brent E. Wood, Mark Michini, Brian J. Foley, and Matthew J. Harmon -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 6.0.2i iQA/AwUBOROR7mpCi4gyYzRmEQIDVwCgz9UQPypTMBJ37ZH9Qj3ftHR03/wAoLwB sRoIyqHOIS2zShQfQKTAQun8 =qh2x -----END PGP SIGNATURE-----
~ \/wG Think outside the box... http://free.be.com
Current thread:
- Re: The Million Dollar Solution Ian Morrish (May 05)
- <Possible follow-ups>
- Re: The Million Dollar Solution A.T.Z. (May 06)
- Re: The Million Dollar Solution Joerg Mayer (May 06)
- Re: The Million Dollar Solution Jeremy Speer (May 06)
- Re: The Million Dollar Solution Richard Rager (May 07)
- Re: The Million Dollar Solution Joerg Mayer (May 06)
- Re: The Million Dollar Solution Alexander Sanda (May 06)
- Re: The Million Dollar Solution Dimitry Andric (May 06)
- Re: The Million Dollar Solution Vince Gittins (May 06)
- Re: The Million Dollar Solution Oystein Viggen (May 07)
- swbell DSL bug ? Ryan Sweat (May 07)
- Re: swbell DSL bug ? Seth R Arnold (May 07)
- Re: swbell DSL bug ? J . Phillips (May 08)
- Re: swbell DSL bug ? vassago (May 08)
- swbell DSL bug ? Ryan Sweat (May 07)
- Re: swbell DSL bug ? Ryan Bonnett (May 07)
- Re: swbell DSL bug ? spoonm (May 08)
- Re: swbell DSL bug ? marc (May 08)