Fighting malware and spam

Tutorials - Disabling Windows Scripting Host

Summary:	How to tell whether Windows Scripting Host (WSH) is installed on your machine and how to disable the running of VBS scripts. This prevents viruses such as VBS/LoveLet-A from infecting your machine.
Updated:	24 October 2002
Author:	Sophos Technical Support Team
Company:	Sophos
Sponsored by:

Procedure

Notes

When Windows, Internet Explorer or some other products are installed or upgraded Windows Scripting Host may be reinstalled. You would then have to repeat the procedures described below.

Some applications require Windows Scripting Host. They will cease to function if it is disabled or removed.

Windows 98

To disable WSH, preventing scripts from being run:

1. From the Windows taskbar, select Start|Settings|Control Panel.
2. In the 'Control Panel' screen, double-click the 'Add/Remove programs' icon.
3. In the 'Add/Remove Programs' window, open the 'Windows Setup' tabbed page. Select 'Accessories' and double-click.
4. In the 'Accessories' list, find 'Windows Scripting Host'.
5. Click on the check-box by 'Windows Scripting Host' to deselect it.
6. Click OK to return to 'Add/Remove Programs' window. Then click on 'OK'.

Windows 95

To prevent scripts with a .VBS extension from being run:

1. On the 'Desktop', or in 'Windows Explorer', right-click on 'My Computer'.
2. Select 'Open' from the menu.
3. In the 'My Computer' window, open the 'View' menu and select 'Options...'.
4. Open the 'File Types' tabbed page.
5. Look for 'VBScript Script File' in the list of file types (if you can't find it, your machine is safe and you don't need to do anything else).
6. Click on the 'Remove' button.
7. If you see a dialog asking you to confirm removal, click 'Yes'.

Windows NT 4.0

To prevent scripts with a .VBS extension from being run:

1. Log on as an administrator.
2. On the 'Desktop', or in 'Windows Explorer', right-click on 'My Computer'.
3. Select 'Open' from the menu.
4. In the 'My Computer' window, open the 'View' menu and select 'Options'.
5. Open the 'File Types' tabbed page.
6. Look for 'VBScript Script File' in the list of file types (if you can't find it, your machine is safe and you don't need to do anything else).
7. Click on the 'Remove' button.
8. If you see a dialog asking you to confirm removal, click 'Yes'.

Windows 2000 and Windows Me

To prevent scripts with a .VBS extension from being run:

1. Log on as an Administrator.
2. On the 'Desktop', or in 'Windows Explorer', right-click on 'My Computer'.
3. Select 'Open' from the menu.
4. In the 'My Computer' window, open the 'Tools' menu and select 'Folder Options'.
5. Open the 'File Types' tabbed page.
6. Look for 'VBScript Script File' in the list of file types (if you can't find it, your machine is safe and you don't need to do anything else).
7. Click on the 'Delete' button.
8. If you see a dialog asking you to confirm removal, click 'Yes'.

Poll

Virus Bulletin

• Social networking meets social engineering
• Flying solo
• Geneva convention
• 7th German Anti Spam Summit 2009
• Anti-phishing landing page: turning a 404 into a teachable moment
• An update on spamming botnets: are we losing the war?
• Windows Server 2008 Standard Edition SP2 x86