AW: Can I delete Wscript.exe?

From: Dominick Baier (db@die-lounge.com)
Date: 10/07/02


From: "Dominick Baier" <db@die-lounge.com>
To: "'Andreas Huber'" <huberan@gmx.at>, <jtnim@hotmail.com>, <focus-ms@securityfocus.com>
Date: Mon, 7 Oct 2002 23:12:12 +0200

Wscript gets replaced by windows file protection when you rename/delete
it ... at least on server versions...

you have to delete \winnt\system32\dllcache\wscript, too

greetings
dominick

-----Ursprüngliche Nachricht-----
Von: Andreas Huber [mailto:huberan@gmx.at]
Gesendet: Montag, 7. Oktober 2002 19:52
An: jtnim@hotmail.com; focus-ms@securityfocus.com
Betreff: AW: Can I delete Wscript.exe?

you could try to rename wscript.exe into wscript.exe.old
If you loose any features, you know that wscript.exe is important for
win2k. if not, your problem is solve.

greets
andreas

-----Ursprüngliche Nachricht-----
Von: jtnim@hotmail.com [mailto:jtnim@hotmail.com]
Gesendet: Montag, 7. Oktober 2002 08:36
An: focus-ms@securityfocus.com
Betreff: Can I delete Wscript.exe?

One way to guard against script viruses and worms is obviously to delete
Wscript.exe entirely. What I'd like to know is how does this affect the
system (W2k)? Do I loose features that I might need? Also, I'm not
exactly sure whether IE and Outlook Express use Wscript.exe to run
scripts, so any info on that would be appreciated. Good links will do!

Thanks!

-- Rubio