Tutorials - Disabling Windows Scripting Host

Summary: How to tell whether Windows Scripting Host (WSH) is installed on your machine and how to disable the running of VBS scripts. This prevents viruses such as VBS/LoveLet-A from infecting your machine.
Updated: 24 October 2002
Author: Sophos Technical Support Team
Company: Sophos
Sponsored by: Sophos Anti-virus

Procedure

Notes

When Windows, Internet Explorer or some other products are installed or upgraded Windows Scripting Host may be reinstalled. You would then have to repeat the procedures described below.

Some applications require Windows Scripting Host. They will cease to function if it is disabled or removed.

Windows 98

WSH is installed if you choose a standard installation of the operating system, or if you install Internet Explorer 5, or if you download WSH from Microsoft.

To disable WSH, preventing scripts from being run:

  1. From the Windows taskbar, select Start|Settings|Control Panel.
  2. In the 'Control Panel' screen, double-click the 'Add/Remove programs' icon.
  3. In the 'Add/Remove Programs' window, open the 'Windows Setup' tabbed page. Select 'Accessories' and double-click.
  4. In the 'Accessories' list, find 'Windows Scripting Host'.
  5. Click on the check-box by 'Windows Scripting Host' to deselect it.
  6. Click OK to return to 'Add/Remove Programs' window. Then click on 'OK'.

Windows 95

WSH is installed if you install Internet Explorer 5, or if you download WSH from Microsoft.

To prevent scripts with a .VBS extension from being run:

  1. On the 'Desktop', or in 'Windows Explorer', right-click on 'My Computer'.
  2. Select 'Open' from the menu.
  3. In the 'My Computer' window, open the 'View' menu and select 'Options...'.
  4. Open the 'File Types' tabbed page.
  5. Look for 'VBScript Script File' in the list of file types (if you can't find it, your machine is safe and you don't need to do anything else).
  6. Click on the 'Remove' button.
  7. If you see a dialog asking you to confirm removal, click 'Yes'.

Windows NT 4.0

WSH is installed if you install Internet Explorer 5, or if you download WSH from Microsoft.

To prevent scripts with a .VBS extension from being run:

  1. Log on as an administrator.
  2. On the 'Desktop', or in 'Windows Explorer', right-click on 'My Computer'.
  3. Select 'Open' from the menu.
  4. In the 'My Computer' window, open the 'View' menu and select 'Options'.
  5. Open the 'File Types' tabbed page.
  6. Look for 'VBScript Script File' in the list of file types (if you can't find it, your machine is safe and you don't need to do anything else).
  7. Click on the 'Remove' button.
  8. If you see a dialog asking you to confirm removal, click 'Yes'.

Windows 2000 and Windows Me

WSH is installed by default.

To prevent scripts with a .VBS extension from being run:

  1. Log on as an Administrator.
  2. On the 'Desktop', or in 'Windows Explorer', right-click on 'My Computer'.
  3. Select 'Open' from the menu.
  4. In the 'My Computer' window, open the 'Tools' menu and select 'Folder Options'.
  5. Open the 'File Types' tabbed page.
  6. Look for 'VBScript Script File' in the list of file types (if you can't find it, your machine is safe and you don't need to do anything else).
  7. Click on the 'Delete' button.
  8. If you see a dialog asking you to confirm removal, click 'Yes'.


Poll

Will the current banking crisis lead to an increase in phishing attacks?
Yes
No
I don't know

Leave a comment

Jobs Career Sidebar

Virus Bulletin

In this month's magazine:
  • Does the punishment fit the crime?
  • Prophet and loss
  • All your MP3s are belong to us
  • Malware teaching considered harmful?
  • Il buono, il brutto, il cattivo
  • Lavasoft Ad-Aware 2008
  • The problem of backscatter – part 1
Virus Bulletin 09 2008
Subscribe now!
Virus Bulletin currently has 137,839 registered users.