[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] RE: [FW1] Blocking vbs
The only problem with this solution is that one missed machine (ie vendor system, or fresh-built system that may not be on the domain for some reason) can still be enough to inject the problem into the system. Isn't it better to block it at the border with anti-virus software that supports content stripping. I do however agree that KIX is a great tool for system wide changes. Cheers Tim -----Original Message----- From: Goldoff, Erik [mailto:[email protected]] Sent: 30 November 2000 18:44 To: '[email protected]' Subject: RE: [FW1] Blocking vbs Here's the Kixtart code in my login script (nothing confidential, I actually got the idea from one of the list-servs (not this one)) ; **************module to change default VBS double-click to Notepad instead of WScript.exe **** Existkey("HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VBSFile\Shell") If @ERROR = 0 WriteValue("HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VBSFile\SHELL","","Edit","RE G_SZ") Endif ;***************end module Erik Goldoff Systems Manager The HoneyBaked Ham [email protected] -----Original Message----- From: Charles Anderson [mailto:[email protected]] Sent: Monday, November 27, 2000 10:12 AM To: '[email protected]' Subject: RE: [FW1] Blocking vbs Erik, Can you send the kixtart code segment to do this. I did this (reset the file association) by sending out an email with a step by step for my users to follow And you no how that goes. Thank you, Charles Anderson Chiaro Networks [email protected] -----Original Message----- From: Goldoff, Erik [mailto:[email protected]] Sent: Friday, November 24, 2000 12:07 PM To: 'Chuck Thacker' Cc: '[email protected]' Subject: RE: [FW1] Blocking vbs you could also change the default association for VBS to open in NOTEPAD rather than run the script with WSCRIPT or WSH ... I did this using Kixtart on all NT 4 clients... are you using a login script processor? Erik Goldoff Systems Manager The HoneyBaked Ham [email protected] -----Original Message----- From: Chuck Thacker [mailto:[email protected]] Sent: Tuesday, November 14, 2000 3:46 PM To: '[email protected]' Subject: [FW1] Blocking vbs Our agency is continually getting hit with users opening vbs scripts in email. Is there any way using Firewall-1 to block these scripts from coming in from the outside? Chuck Thacker Network Analyst Greater Orlando Aviation Authority [email protected]============================================================================ ==== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ============================================================================ ==== ============================================================================ ==== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ============================================================================ ==== ============================================================================ ==== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ============================================================================ ==== ============================================================================ ==== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ============================================================================ ==== ************************************************************************ The information in this email is confidential and is intended solely for the addressee(s). Access to this email by anyone else is unauthorised. If you are not an intended recipient, you must not read, use or disseminate the information contained in the email. Any views expressed in this message are those of the individual sender, except where the sender specifically states them to be the views of The Capital Markets Company. http://www.capco.com *********************************************************************** ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|