How do you disable automatic execution of .js javascript outside browsers (from mail attachments etc.) – protect your installation from .js files like Locke/Locky harddisc crypt ransomware.

On windows 7-8-10:

locate the “run” application (win10: start – all apps – windows system)
type regedit and <enter>
locate and click .js
double-click (Standard) to the right
Blanck out the value (JSFile)
click OK

thanks to CSIS for a great article and good info