Article here on bleeping computer
easy to do
I created a “test.js” in a text editor to verify the fix worked and windows said it blocked it from running
Windows Script Host is enabled by default in Windows.
Shut it down. If you do mistakenly open a .js attachment it can’t execute.
Few people need to run javascript outside a browser and there is no real reason to send someone a legitimate .js attachment.
Ransomware authors are looking for new vulnerabilities to take a computer and its data hostage.
.js execution is ideal because an infected file doesn’t need user permission to run and antivirus or antimalware software usually doesn’t detect it.
Make it a habit not to allow unknown file extensions to execute in the first place.
Does that fix work for all users out do you have to do that for every user?
bttt