RE: Can I delete Wscript.exe?

From: REAVA, JEFFREY [IT/0200] (jeffrey.reava@pharmacia.com)
Date: 10/07/02 

From: "REAVA, JEFFREY [IT/0200]" <jeffrey.reava@pharmacia.com>
To: "'jtnim@hotmail.com'" <jtnim@hotmail.com>, focus-ms@securityfocus.com
Date: Mon, 7 Oct 2002 12:02:57 -0500

Would it make sense to change the default association with *.vbs files so
that you can logically filter which scripts are allowed to run?

Replace the original association in the registry with this:
HKEY_CLASSES_ROOT\VBSFile\Shell\Open\Command
C:\WINNT\System32\WScript.exe C:\WINNT\System32\wshcheck.vbs "%1" %*

where wshcheck.vbs first opens the vbs file, checks for the string
"ApprovedByRubio" on the top line. If it isn't there, warn the user that an
unsigned script attempted to execute, call the help desk, etc.

HTH,

Jeff

-----Original Message-----
From: jtnim@hotmail.com [mailto:jtnim@hotmail.com]
Sent: Monday, October 07, 2002 2:36 AM
To: focus-ms@securityfocus.com
Subject: Can I delete Wscript.exe?

One way to guard against script viruses and worms is obviously to delete
Wscript.exe entirely. What I'd like to know is how does this affect the
system (W2k)? Do I loose features that I might need? Also, I'm not exactly
sure whether IE and Outlook Express use Wscript.exe to run scripts, so any
info on that would be appreciated. Good links will do!

Thanks!

-- Rubio

Relevant Pages

  • Re: VBS will not run on a few PCs
    ... I have a couple .vbs files running via Group Policy during login. ... most computers on the network the scripts are running fine. ... The scripts are run by user but on a few machines they just don't seem ...
    (microsoft.public.scripting.vbscript)
  • Re: How to Secure Your Browsers from Malicous Hackers
    ... > of my .reg, or .vbs files, than when he tries to affect a change ... > Scripts are an extremely useful tool, ... > In a major corperate environment this would of course be out of the ... but one has to asses the risk as per given situation. ...
    (comp.security.firewalls)
  • Re: How to Secure Your Browsers from Malicous Hackers
    ... > of my .reg, or .vbs files, than when he tries to affect a change ... > Scripts are an extremely useful tool, ... > In a major corperate environment this would of course be out of the ... but one has to asses the risk as per given situation. ...
    (alt.computer.security)
  • Re: How to Secure Your Browsers from Malicous Hackers
    ... > of my .reg, or .vbs files, than when he tries to affect a change ... > Scripts are an extremely useful tool, ... > In a major corperate environment this would of course be out of the ... but one has to asses the risk as per given situation. ...
    (microsoft.public.security)
  • RE: Calling functions in another .VBS
    ... Assuming your project scripts are VBS files and that your 'library file' only ... a string in the calling script and then passing the string to either an ...
    (microsoft.public.scripting.wsh)