Guide | How To How to Prevent ZIP Files from Executing Malicious JavaScript

The associated guide may contain user-generated or external content.

Exterminator

Level 85
Thread author
Verified
Top Poster
Well-known
Oct 23, 2012
12,527
To prevent automatic execution of a malicious Javascript file attached to a .zip file you must disable automatic JavaScript execution via Windows Script Host

  1. Open the Windows Search and type in "Regedit" to open the Windows Registry Editor.
  2. On the left you have some folders. Open the folders in the following order (path): "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Script Host\Settings"
  3. Once you've reached the last folder called "Settings," go to the panel on the right and right-click anywhere on the background.
  4. From the new popup menu, select the "New" and then the "DWORD (32 Bit) Value".
  5. This will create a new entry, which you'll have to name "Enabled". Once you've done this, double-click it to open a new popup.
    how-to-prevent-zip-files-from-executing-malicious-javascript-behind-your-back-503226-5.jpg

  6. In this popup, make sure that you have "0" (zero) entered in the Value field, and that the Base setting is set to Hexadecimal.
To test that it works download this file (jQuery Javascript library)http://code.jquery.com/jquery-2.2.3.js
Save it to your PC from your browser by pressing "Ctrl & S"
Then double click the file and click open
If done correctly you should get the following pop up
Ashampoo_Snap_2016.04.20_15h08m17s_002_.png


Source
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top