(This is in reference to the e-mail Wscript.Kak Worm and others.)
For those of you that followed the early instructions that were
on the WEB for disabling "Windows Scripting Host", (like I followed),
take note -- I just discovered they do not work and found out why.
Anyone that ONLY renamed wscript.exe to a different extension will
be surprised to find that Windows (95B at least) will "correct" the file
association type AND RUN a "BAK" file as if it was an "EXE" or "BAT"
file... Seems strange to me, but there is NO wscript.exe on my system
ONLY wscript.baK
but I can run the "Windows Scripting Host" just fine...
To test, put the entire following line (use copy and paste) in notepad:
MsgBox "Windows Scripting Host is working.", 0, "OH NO!!!"
Save the file as: script-h.vbs
Be sure to get the extension right.
Try to run this file by double-clicking on it...
If it runs, you are not protected from (some of) the e-mail viruses that are
going around. Symantec has numerous pages on this file type and gives
proper instructions to correct any misinformation you/we have gotten
ELSEWHERE in the past about this file type/e-mail virus.
A page link is as follows:
http://service1.symantec.com/SUPPORT/nav.nsf/docid/2000050512031906
Also search (in the virus search section) for Wscript.Kak
Rick Glazier
The NOSPIN Group provides a monthly newsletter with great
tips, information and ideas: NOSPIN-L, The NOSPIN Magazine
Visit our web site to signup: http://nospin.com
|