🚀 go-pugleaf

In article <ap0R4.851$4h.20547@news6-win.server.ntlworld.com> on Sat, 6
May 2000, barry.morgan <barry.morgan@ntlworld.com> writes
>> I'm not sure exactly how the file is invoked from OE, but the normal way
>> of preventing stray .js, .vbs and .reg files from wreaking havoc is to
>> select them in "File Types" and change the default action to "Edit" from
>> the usual "Open".

Rather drastic, and it doesn't cover all of the possible vectors.

>A nice solution but could cause havoc when installing anything afterwards,
>or running any progrma that legitimately uses a VB script ?
>Maybe there's a way to incorporate a 'confirm' action in the 'Open'
>dialogue??

A new version of Turnpike (v5.01) has just been released which does
exactly this.

For quite some time it has done so for .bat .com .dll .exe and .reg
(registry editing script), but now it also does it for .lnk .cmd .js
.pif .sct .wsc .wsf .wsh and .vbs files. I am sure if others present
themselves TP will update the list.

All of these file types could be (or point to) scripts or programs which
could cause harm.

Also I would recommend that you make sure that you turn off the ability
of MS Office applications (i.e. word and excel) to auto-execute macros,
these are also a security risk (e.g. the Concept Word macro Trojan).

Remember -      Never open attachments which you are not
                expecting, especially programs or scripts.

                Even if they come from someone you trust,
                they may have been conned into sending it to
                you by being infected themselves.

For more information on Turnpike, have a look at www.turnpike.com for
one of the best PC email & news clients (no I don't have any connection
with them other than as a satisfied customer). It was one of the best
15quids I have ever spent (and it is free to Demon subscribers).

The new version with re-vamped user interface should be out soon. The
current version *looks* old fashioned, but still works better than any
other email/news client I have seen on PCs, and is one of the most
standards compliant programs I have seen.


Take care,


Mark...........
-- 
If the world were an oyster, it would be mine.......