Re: The Million Dollar Solution

[jspeer () IH8DOS COM (Jeremy Speer)]

What if you set the default action in Windoze to edit .vbs, .vba, .js,
.wsc, .vbe, and .jse files. Then when they execute, it would bring up the
default editor for that file type?

My 2 cents.

-----Original Message-----
From: VULN-DEV List [mailto:VULN-DEV () SECURITYFOCUS COM]On Behalf Of
Matthew Harmon
Sent: Friday, May 05, 2000 8:34 PM
To: VULN-DEV () SECURITYFOCUS COM
Subject: [VULN-DEV] The Million Dollar Solution

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Everyone has been scrambling east and west, north and south trying to
find the answer to these VBS viruses, the answer is not eMail
filtering, it's not better firewalls, or failing members of the FBI
community.

It is a file called WScript.Exe

A batch (.BAT) file with these two lines will deal with this problem:

ren %SystemRoot%\system32\wscript.exe wscript.sav
ren c:\windows\wscript.exe wscript.sav

If you get rid of this engine, then all Visual Basic Scripts cannot be
run.

More information can be found about this file on the Microsoft
Knowledge Base.

I haven't seen this on BugTraq or Vuln-Dev yet, hope it helps you out!

Sincerely,
The Network Support Team of Playback Media, Inc.
Brent E. Wood, Mark Michini, Brian J. Foley, and Matthew J. Harmon

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.0.2i

iQA/AwUBOROR7mpCi4gyYzRmEQIDVwCgz9UQPypTMBJ37ZH9Qj3ftHR03/wAoLwB
sRoIyqHOIS2zShQfQKTAQun8
=qh2x
-----END PGP SIGNATURE-----

<HR NOSHADE>
<UL>
<LI>application/x-pkcs7-signature attachment: smime.p7s
</UL>