Re: Worms and CScript/WScript

From: Ryan Russell (ryanat_private)
Date: Tue May 21 2002 - 15:07:20 PDT

  • Next message: verbalat_private: "RE: Worms and CScript/WScript"

    On Tue, 21 May 2002, Blake Frantz wrote:
    
    > A majority of the worms (even SQLsnake) that have been going around
    > lately take advantage of cscript and wscript.  What ramifications would
    > be felt on vanilla installs of common services (MS SQL, Exchange, IIS,
    > etc.) if these two files were moved or deleted?  It seems like a fairly
    > easy way to help mitigate the 'success' of Internet worms.  Any
    > thoughts?
    
    Tried that once.  The next IE upgrade will just put them back, and you
    might not even notice... was kinda counterproductive.
    
    					Ryan
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Tue May 21 2002 - 15:22:09 PDT