Discussion Locked

blocking .vbs with exchange

0 helpful
7 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
In light of the the AnnaKournakova worm, does anyone know how to block all .vbs attachments using Exchange 5.0?

7 replies

by fgarber

We use a product from sybari called antigen for exchange. It will block any content you like and does it before the email is placed in the users inbox. We use it very successfully. Haven't had an email virus problem since we installed it.

Theyhave a trial download for evaluation purposes at
http://www.sybari.com

by jpt

Our office is using Mail Essentials. This gives us the ability to weed out all kinds of emails before they come into or leave the office. I don't believe there is a way to block out .vbs extension just by using Exchange 5.0? There is an article on Microsofts webpage that may help you out with your problem as well. Here you go.
http://www.microsoft.com/servers/sup/support.asp?prd=exchange&lu=1

Hope this helps.

by kdrungilas

We use a SMTP server which strips out unwanted attachments like those mentioned, but additionally we changed our ghost images to handle VB scripts differently before they even arrive at a user's Inbox.

For added security, prevent any VBS script from running when opened in an outlook item by changing the way VBS scripts run when double-clicked or previewed in mail. Rarely does one of our end-users need to run a VB script.

In My Computer or in any Windows Explorer window, choose View | Options, then switch to the File Types tab.
Select the entry for VBScript Script File, which uses the extension VBS, and then click Edit (Advanced in Windows 2000).
On the Edit File Type dialog box, under Actions, select Edit, and then click Set Default.
Make sure the boxes for Confirm Open After Download and Always show extension are checked. (These offer additional protection. The VBS/LoveLetter virus masqueraded as a text file on systems where extensions were not displayed by using the file name LOVE-LETTER-FOR-YOU.TXT.vbs.)
Click OK to return to the File Types tab.
Repeat Steps 2-5 for these other scripting file types, if you find them in the Registered file types list:

JScript Script File (extension JS)
JScript Encoded Script File (JSE)
VBScript Encoded Script File (VBE)
Windows Script File (WSF)

Click OK to save your changes.
After you change the file type associations, double-clicking one of these files or opening it from inside an Outlook message will display the file in Notepad. When you need to run one of these scripts, you can right-click it and choose Open from the popup menu.

This discussion is closed to new replies.