Tutorials - Disabling Windows Scripting Host

Summary: How to tell whether Windows Scripting Host (WSH) is installed on your machine and how to disable the running of VBS scripts. This prevents viruses such as VBS/LoveLet-A from infecting your machine.
Updated: 24 October 2002
Author: Sophos Technical Support Team
Company: Sophos
Sponsored by: Sophos Anti-virus

Procedure

Notes

When Windows, Internet Explorer or some other products are installed or upgraded Windows Scripting Host may be reinstalled. You would then have to repeat the procedures described below.

Some applications require Windows Scripting Host. They will cease to function if it is disabled or removed.

Windows 98

WSH is installed if you choose a standard installation of the operating system, or if you install Internet Explorer 5, or if you download WSH from Microsoft.

To disable WSH, preventing scripts from being run:

  1. From the Windows taskbar, select Start|Settings|Control Panel.
  2. In the 'Control Panel' screen, double-click the 'Add/Remove programs' icon.
  3. In the 'Add/Remove Programs' window, open the 'Windows Setup' tabbed page. Select 'Accessories' and double-click.
  4. In the 'Accessories' list, find 'Windows Scripting Host'.
  5. Click on the check-box by 'Windows Scripting Host' to deselect it.
  6. Click OK to return to 'Add/Remove Programs' window. Then click on 'OK'.

Windows 95

WSH is installed if you install Internet Explorer 5, or if you download WSH from Microsoft.

To prevent scripts with a .VBS extension from being run:

  1. On the 'Desktop', or in 'Windows Explorer', right-click on 'My Computer'.
  2. Select 'Open' from the menu.
  3. In the 'My Computer' window, open the 'View' menu and select 'Options...'.
  4. Open the 'File Types' tabbed page.
  5. Look for 'VBScript Script File' in the list of file types (if you can't find it, your machine is safe and you don't need to do anything else).
  6. Click on the 'Remove' button.
  7. If you see a dialog asking you to confirm removal, click 'Yes'.

Windows NT 4.0

WSH is installed if you install Internet Explorer 5, or if you download WSH from Microsoft.

To prevent scripts with a .VBS extension from being run:

  1. Log on as an administrator.
  2. On the 'Desktop', or in 'Windows Explorer', right-click on 'My Computer'.
  3. Select 'Open' from the menu.
  4. In the 'My Computer' window, open the 'View' menu and select 'Options'.
  5. Open the 'File Types' tabbed page.
  6. Look for 'VBScript Script File' in the list of file types (if you can't find it, your machine is safe and you don't need to do anything else).
  7. Click on the 'Remove' button.
  8. If you see a dialog asking you to confirm removal, click 'Yes'.

Windows 2000 and Windows Me

WSH is installed by default.

To prevent scripts with a .VBS extension from being run:

  1. Log on as an Administrator.
  2. On the 'Desktop', or in 'Windows Explorer', right-click on 'My Computer'.
  3. Select 'Open' from the menu.
  4. In the 'My Computer' window, open the 'Tools' menu and select 'Folder Options'.
  5. Open the 'File Types' tabbed page.
  6. Look for 'VBScript Script File' in the list of file types (if you can't find it, your machine is safe and you don't need to do anything else).
  7. Click on the 'Delete' button.
  8. If you see a dialog asking you to confirm removal, click 'Yes'.

Quick Links



Poll

When do you install software updates?
As soon as they are released
As soon as I have some time
I take my time, but I always install them eventually
Only when I feel it is absolutely necessary
Never
Leave a comment
View 12 comments

Jobs Recruit Sidebar

Twitter Feed

virusbtn: RT @emailsecmatters: The typical spam message has sources as diverse as the spam lunch meat: http://ht.ly/2yucd
2 hours ago


virusbtn: Can anyone write a rap about our RAP tests (http://bit.ly/255ySQ) and submit it to the Symantec competition http://bit.ly/bOJg8r
6 hours ago


Malware Prevalence

Autorun |########|
Conficker/Downadup |######|
VB |#####|
Agent |#####|
FakeAlert/Renos |####|
 View this month's full report
Virus Bulletin currently has 208,224 registered users.