How to find file location of running VBScript in background?

I do penetration testing a lot all the day;
I taken a python script from github and now I forgot its name;
I ran it after it got hidden to my system anywhere;
Everytime I starts my system an cmd opens;
Then VB SCRIPT message popups and disturbs me a lot that I am tired.

Screenshot:
https://i.stack.imgur.com/ppTfJ.png
https://i.stack.imgur.com/cy98I.png

And when I open task manager ,
and click open file location,
It takes me to C:\Windows\System32\wscript.exe
Not to file location from where it was being launched.

I accept any type of answer that will solve my problem,
Any type means any type (e.g programmatic,manual,etc).

You can use " ProcessExplorer " of " Sysinternals " for a better experience …

and then in proprieties you will find Command Line option

1 Like

@ DamaneDz Lets suppose abc.vbs is running in background.
abc.vbs also runs other scripts like xyz1.vbs, xyz2.vbs, xyz3.vbs,
This will tell the location of xyz1.vbs, xyz2.vbs, xyz3.vbs,
Not the file location of abc.vbs.

Find abc.vbs and read the source and you’ll find the rest easily !

hahaha,
Thats what I was asking,
This file is shown in taskbar,
But I am unable to find it,
How can I find it?

Hi. I’m Kay will like know you… so we can work together…

Are you asking me?
What work?

This topic was automatically closed after 121 days. New replies are no longer allowed.