[RESOLVED] Block .vbs extension

[jfesler]

Does anyone know how to block .vbs files from a server level? We are using Exchange 5.5. I would like to block this at the server, rather than the workstations.

Thanks!

------------------
Everywhere you go, there you are...

[martyzman]

You can look at the Microsoft page for a program called issscan. They put it out for the Melissa and I love you virii. All you have to do is download it and modify the text strings to look for the signature of the virus then run the puppy on your Exchange system. The only prob is that you need to have Exchange down to do it. There is a proggy called Exmerge.exe that will supposedly run while the server is active.
Good luck... Marty


------------------
"It's full of Stars"

[jfesler]

Thank you for the info. I downloaded those progs yesterday. I am just wondering if there is anyway to block all messages with .vbs extension.

------------------
Everywhere you go, there you are...

[captpackrat]

If this is a corporate environment, and your users are running Outlook 98 or 2000, install the Security Patch on the user's systems. That will block all .VBS and most other executables at the user end.

Don't know of anything that'll work (easily) from the server end.

------------------
Captain Troy D. Pack Rat
`akbar Press

If you're furry and you know it, hug the mouse!

[iateyourcat]

http://www.gfi.com/mesindex.htm

good package. it's an antivirus scanner and staziware that filters on anything from spam to porn to extentions.

------------------
=-iateyourcat-=

[pcshark]

I replied in another thread that you can block .vbs attachments with Norton AntiVirus for Exchange Server. You can also block attachments of whatever extension you choose, should a future virus type rear its ugly head.

------------------
R. Bret Walker, CNE
(I'm not a Master Tech, but I play one on TV)

Wondering what videos to rent this weekend? Check out The People's Reviews, movie reviews written for the people and by the people.

[cyberhh]

To scan encapsolated files (email) for attachments requires a server version of the virus scanner setup to scan. You can then block whatever you would like from reaching your client or leaving the building. Check the McAfee and Symantec site (as well as your personal fav.) for information.

Also if you disable the windows scripting host on your workstations then the VBS files will not run.

------------------
Death is lighter than a feather - duty heavier than a mountian.

[CASMAN]

I am on the workstation side of the LAN and our Net Admin guys are sending down scripts so that when a user opens a .vbs ext. it causes it to open notepad instead of running the vbs program
I don't know the details but it seems to have worked

__________________________________
What happens if you get scared half to death, twice?


[This message has been edited by CASMAN (edited March 06, 2001).]

[This message has been edited by CASMAN (edited March 06, 2001).]

[pcshark]

Interesting solution, easily done through editing File extension associations (go to Explorer, then click Tools/Options or Tools/Folder Options, and click File Types. Find VBS file type and edit it so it opens with Notepad.exe).

Cool idea (-: Guards against future infections.

------------------
R. Bret Walker, CNE
(I'm not a Master Tech, but I play one on TV)

Wondering what videos to rent this weekend? Check out The People's Reviews, movie reviews written for the people and by the people.

[Gabriel]

I use Mcafee Groupshield for Exchange!
Along with it's ability to Scan incoming/outgoing Emails -
It can Block Attachments by - Size, Extenssions, FileNames Etc.

(I block EXE, com, VBS, BAT, CMD, JS, MPG - To Save up Bandwidth...)

Another Neat thing is that you have Outbreak Manager - who can Detect "Virus Like" beahviour on the Exchange Server!


------------------
*************************
It Works Better if you Plug it in, It Works far better if you Turn it ON!