What is a Windows Host Script?
Windows Script Host is an administration tool in Windows operating systems, such as Windows 7, Vista, XP, Windows 2003, etc. Computer administrators can use Windows Script Host (WSH) to automate or administer some tasks for client computers or servers. Some software author will embed scripts to automate tasks using their program. You can run a script with two methods using a desktop – by double-clicking a script file or from a command prompt. WSH can be run from either the protected mode Windows-based host (Wscript.exe), or the real mode command shell-based host (Cscript.exe).
Some malware authors are taking advantage of WSH because it can be used to automate their malicious software. Antivirus and antispyware software vendors are aware of the security concerns on these files which is why it’s recommended to configure the antivirus software to scan all file types in Windows, and in real-time. Note that some security researchers or vendors recommend that you disable WSH in Windows as a preventive measure to protect from viruses that uses WSH. However, most antivirus programs have the ability to detect malicious scripts in a webpage or a file on a computer so it is not a requirement to disable or remove WSH.
The latest version of WSH is v5.8 which is included in Windows 7 computers. Other editions of Windows have version 5.7 or 5.6. Since version 5.6, a WSH can be digitally signed with a valid certificate.
A website that uses scripting can automatically load or run what the script is programmed to do, but Microsoft added security enhancements for Internet Explorer 4.0 and higher to treat WSH objects as unsafe ActiveX controls. End-users will see a dialogue box or warning within the browser if they want to continue running the script from the webpage they are visiting or viewing.
If you come across an error that is related to Windows Script Hosting, check out the solutions in the next sections of this article.