.JS Default File Association Change

A policy has been rolled out that sets the default file association for .JS files to open with notepad, instead of the Windows Scripting Host. This was done because Locky is now using malicious .js files (attached via e-mail or otherwise) as an infection vector. The policy will show up as “Windows – Default File Associations” for users in the CN domain or “TSS – Windows – Default File Associations”¬†for users in the ONID domain.

If a user would prefer .js files open with something else besides notepad, doing a Right Click -> Open With and picking the ‘always open with <xyz>’ option will reset the file association properly. The GPO changes the default, it does not repeatedly reassociate the extension.

Print Friendly, PDF & Email

Leave a Reply