|
Custom Script: C0030
"Anti-Virus"
With all the poly-morphing
VBS virus strains these days, one of them is sure to eventually make it through
your enterprise and/or local anti-virus scanner. This custom script can be your
last-line-of-defense by disassociating common extensions from Windows Script
Host. Additionally, this custom script will ensure that your clients are
protected in other ways, including:
What it Does:
- Cleanup the
VBS.Loveletter.A and AnnaKournakova viruses, if detected on the client and
create a log file of any viruses found.
- Disassociate .VBS
from Windows Script Host (and optionally .VB, .VBE, .VSE, .JS, .JSE, .CSS, .WSH,
.SCT, .HTA, and even .SHS (remember the ShellScrap Virus?)
- Implement patches
contained in Microsoft's
Security Bulletin (MS99-032)
- Ensure that Outlook's
attachment safety is set to High
- Ensure Internet
Explorer's "Initialize and script ActiveX Controls not marked as
safe" option is always disabled
When we change the file
associations for ".VBS" (and other files) files from Windows Script
Host (wscript.exe or cscript.exe) to notepad.exe (text editor), we prevent the
execution of a script virus by WSH. Should a script-type virus slip through your
front-line defenses, and your users double-click the file (or attachment) they
will simply view the virus script in notepad -- nice and harmless.
Note: If your organization
actively uses scripts (outside the logon process), it is important to mention
that changing the associations does not prohibit the use of these scripts -- it
just requires one extra step: Create a command or batch file with a single line.
For example: "Wscript.exe myscript.vbs" or "Cscript.exe
myscript.vbs".
This script is now the
combination of two former custom scripts (C1030 & C1031) and has undergone
several improvements since it was originally released. On 8/16/2001, we updated
and released
an alternate version of this script, specifically designed to harness the new
APIs found in ScriptLogic v4.0.
Download Custom Script (for
ScriptLogic 3.0x): AntiVirus30.kix
Download Custom Script (for
ScriptLogic 4.0x): AntiVirus40.kix
Instructions on how to install a
custom script.
Created: 05 May, 2000
Last Revised: 22 July, 2004
|
Support Home 
