Is it possible to recover a running VBScript file, if the original file was already deleted?

I have one Vbscript which runs continuously on my system to monitor a web page on Internet Explorer.

I have permanently deleted this Vbscript file from its original location on system by mistake, However the script is still in RAM and is still running and monitoring the web page.

This script is very important to me but I have lost it :(

I want to know if there is any way by which I can recover the code of Vbscript file from system's RAM or any temporary file as the script is still running.

I am not allowed to use any file recovery software, so please don't suggest to install any third party data recovery software.

Answers


Try using 'ADPlus.vbs' script from WinDbg: 1. http://msdn.microsoft.com/en-us/windows/hardware/hh852365 2. http://support.microsoft.com/kb/286350


As the code was running, I followed the below process to recover the running code:

  1. Go to Task Manager
  2. Select the process and create dump
  3. Open online dump analyser (www.osronline.com)
  4. Upload dump file
  5. Download the dump analysis

The dump analysis provided almost 95% of the correct code. Code within some loops were distorted or changed. As I was the owner of the code I was able to correct it.


Use HxD, it can view all ram content relative to any process at fly. It is commonly used to hack currently running games etc.

After locating your script, it might be needed to clear alphanumeric mess between your code, N++ and regex knowledge may be useful.


Need Your Help

Check permissions of an assembly

.net-4.0

I have .Net framework 4.0. It doesn't provide the Configuration tool as earlier versions did.

How to set a correct session expired for my code?

c# session-timeout expired-sessions

I have a code that doing the popup message for the session expired, as following. However, this code cannot do a correct counting session. When run the program, it will direct popup the session exp...