vbs virus

[blink]

hello everyone quick question.how serious is the vbs strain?ran into a pc that was infested.is nortons able to deal with it?


thanks

[ilovetheusers]

vbs strain? Well, there are literally hundreds of .vbs viruses out right now. Some are just annoying, others have nasty payloads that delete the drive or corrupt files.

Yes Norton will take care of some of them and it is a good product. I use a product called AVG by <a href="http://www.grisoft.com" target="_blank">http://www.grisoft.com</a> that is free and works like a charm. It also has very little system overhead, especially when compared to Norton. It scans every night and update itself everyday (or how ever often you set it).

Now, please note that there is no scanner yet that will stop brand new viruses that come out until the makers of the scanner put out updates to kill it (why you need to update on a regular basis). So, there is no better defense than using your head. Nevr open attachments directly, save them and look at the extention. I scan it, evaluate who sent it and look at the message and what the contents might be. If it is not something important I don't open it. If it is an executable file (like a .vbs or an .exe or somthing) I will often just chuck it. Yes I miss out on the fuzzy bear that walks to the side of the screen and hold up a sign that says "ain't I cute" but I'm really none the worse for missing it.

[Gabriel]

[quote]Originally posted by ilovetheusers:
<strong>Now, please note that there is no scanner yet that will stop brand new viruses that come out until the makers of the scanner put out updates to kill it (why you need to update on a regular basis). So, there is no better defense than using your head.....</strong><hr></blockquote>

As much as I respect your opinion - IMHO there is a way of fightng those Email Based Viruses.
it is called:
-BLOCKING-

Few Server based software (such as Mcafee Groupshield, MimSweeper Etc.) offer blocking of files by Rules.
You can Block VBS, EXE, CMD or what ever you wish.
Just put on the Wildcard and there you have it.
I have implemented it on 3-4 companies and uptill now (touch wood) it worked like a charm.

It is very much a sollution to all of those VBS- DIY kits around there.


My 2 cents...


P.s. About VBS attachments I have a simple REG file which alternate the default (Double click) OPEN command to Notepad (and not WSH).
which of you that want it PM me with Email and I will send it to you.

Good Luck
Gabriel

[Stalemate]

If filtering isn't an option, you could also associate *.VBS files to Notepad by default.

...unless your actively using these scripts, but I haven't seen such a situation yet.