Re: The Million Dollar Solution (NOT?)

[nohican () NIETS ORG (Nohican)]

Hi,

This is not a good solution, vbs script are used in a wider range
then just for viruses or worms. The hoax about this virus is increddible
i've seen stories on CNN that make my laugh, and people claiming microsoft?
get real.

If someone would send you a plain text c file which would delete every file
on your hdd, and you would compile this and run this as root. This is not
a virus, though this is what happened.

One should introduce a user-level system into windows, where WSH cannot
have certain permissions (like ddeleting files, renamening files. etc)

This is not a solution, this is not a microsoft fault, this is plain
stupid people. They make computers look to easy in advertising.

Greetings,

Nohican

-----Original Message-----
From: VULN-DEV List [mailto:VULN-DEV () SECURITYFOCUS COM]On Behalf Of
Matthew Harmon
Sent: Saturday, May 06, 2000 5:34 AM
To: VULN-DEV () SECURITYFOCUS COM
Subject: The Million Dollar Solution

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Everyone has been scrambling east and west, north and south trying to
find the answer to these VBS viruses, the answer is not eMail
filtering, it's not better firewalls, or failing members of the FBI
community.

It is a file called WScript.Exe

A batch (.BAT) file with these two lines will deal with this problem:

ren %SystemRoot%\system32\wscript.exe wscript.sav
ren c:\windows\wscript.exe wscript.sav

If you get rid of this engine, then all Visual Basic Scripts cannot be
run.

More information can be found about this file on the Microsoft
Knowledge Base.

I haven't seen this on BugTraq or Vuln-Dev yet, hope it helps you out!

Sincerely,
The Network Support Team of Playback Media, Inc.
Brent E. Wood, Mark Michini, Brian J. Foley, and Matthew J. Harmon

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.0.2i

iQA/AwUBOROR7mpCi4gyYzRmEQIDVwCgz9UQPypTMBJ37ZH9Qj3ftHR03/wAoLwB
sRoIyqHOIS2zShQfQKTAQun8
=qh2x
-----END PGP SIGNATURE-----