How to disable Windows Scripting Host

The majority of viruses recently have been email-based. They are often written = in VBScript which is a scripting language used to automate tasks without user intervention (or perhaps, one even knowing the script is running). Microsoft built the Windows Scripting Host (WSH) as an application to run vbscript programs. It ships as an integral part of Windows 2000 and Windows XP. WSH = is also included when one downloads Internet Explorer 5. WSH can be used to get access to the Windows commandshell, file system, and registry. Lots of peop= le know vbscript. Its complexity is low, at least, the complexity to write vir= us code.

To find out if the W= indows Scripting Host is enabled on your PC:

&m= iddot; = Click Start | Run | cmd

&m= iddot; = Type wscript in the command shell

If its enabled, the Windows Script Host Settings dialog box will poppup. =

You can protect your= self from these malicious programs if you have up-to-date antivirus code residen= t. This is becoming an absolute requirement in corporate environments. If you don't have that level of protection, you might want to block the vbscripting threat by disabling the Windows Scripting Host which is the agent that exec= utes the .vbs files. There are several methods which are compatible for Windows = NT / Windows 2000 and Windows XP:

&m= iddot; = Rename or delete the WSH executable : wscript.exe
Its normally found in the system32 folder.

&m= iddot; = Block WSH from executing .vbs files by removing the file association

o = Right-click My Computer

o = Select Open from the menu

o = Select the View tab

o = Select Options

o = Open the File Types tab

o = Select VBScript Script File from the list of file types
If its not there, then WSH is not installed or has been disabled. If its th= ere

o = Click on the Remove button to remove the ability of WSH to run .vbs scripts. =

o = Another alternative if you want to know when a script has been activated, you can use the Edit button to change the default action for .vbs files from Open (running) them to <= span style=3D'font-size:8.5pt;font-family:Verdana;color:brown'>Edit . That is open sc= ript in Notepad.

&m= iddot; = Dynamically disable / enable WSH using Symantec's Noscript.exe freeware program. =

&m= iddot; = Disable scripts using freeware AnalogX Script Defender program. AnalogX Script Defen= der will intercept any request to execute the most common scripting types used = in virus attacks, such as Visual Basic Scripting (.VBS) and Java Script (.JS).= It can even be configured to intercept new script extensions as needed! It's v= ery simple to use and helps to ensure that you do not inadvertently run a scrip= t no matter what email program you use, or even if you get it via another method= .

These instructions explain how to tell w= hether Windows Scripting Host (WSH) is installed on your machine and how to disable the running of VBS scripts. This can prevent some worms from infecting your computer.

When Windows, Internet Explorer or some = other products are installed or upgraded Windows Scripting Host may be reinstalle= d. You would then have to repeat the procedures described below.

Important note: Some applications require Windows Scripting Host. They will cease to function if it is disabled or removed.

Windows 98

WSH is installed if you choose a standard installation of the operating system, or if you install Internet Explorer 5= , or if you download WSH from Microsoft.

To disable WSH, preventing scripts from = being run:

From the Windows taskbar, select Start|Settings|Control Panel.
In the 'Control Panel' screen, double-click = the 'Add/Remove programs' icon.
In the 'Add/Remove Programs' window, open the 'Windows Setup' tabbed page. Select 'Accessories' and double-click.

3D"Windows

In the 'Accessories' list, find 'Windows Scripting Host'.
Click on the check-box by 'Windows Scripting Host' to deselect it.
Click OK to return to 'Add/Remove Programs' window. Then click on 'OK'.

Windows 95

WSH is installed if you install Internet Explorer 5, or if you download WSH from Microsoft.

To prevent scripts with a .VBS extension= from being run:

On the 'Desktop', or in 'Windows Explorer', right-click on 'My Computer'.
Select 'Open' from the menu.
In the 'My Computer' window, open the 'View' menu and select 'Options...'.
Open the 'File Types' tabbed page.

3D"Windows

These instructions explain how to tell wheth= er Windows Scripting Host (WSH) is installed on your machine and look for 'VBScript Script File' in the list of file types (if you can't find it, you don't need to do anything else).
Click on the 'Remove' button.
If you see a dialog asking you to confirm removal, click 'Yes'.

Windows NT 4.0

WSH is installed if you install Internet Explorer 5, or if you download WSH from Microsoft.

To prevent scripts with a .VBS extension= from being run:

Log on as an administrator.
On the 'Desktop', or in 'Windows Explorer', right-click on 'My Computer'.
Select 'Open' from the menu.
In the 'My Computer' window, open the 'View' menu and select 'Options'.
Open the 'File Types' tabbed page.

3D"Windows =

Look for 'VBScript Script File' in the list = of file types (if you can't find it, you don't need to do anything else).=
Click on the 'Remove' button.
If you see a dialog asking you to confirm removal, click 'Yes'.

Windows 2000/Me/XP/2003

WSH is installed by default.<= /span>

To prevent scripts with a .VBS extension= from being run:

Log on as an Administrator.
On the 'Desktop', or in 'Windows Explorer', right-click on 'My Computer'.
Select 'Open' from the menu.
In the 'My Computer' window, open the 'Tools= ' menu and select 'Folder Options'.
Open the 'File Types' tabbed page.

3D"Windows

Look for 'VBScript Script File' in the list = of file types (if you can't find it, you don't need to do anything else).=
Click on the 'Delete' button.
If you see a dialog asking you to confirm removal, click 'Yes'.