Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 789026" data-attributes="member: 32260">When you execute the script by a mouse-click, then on 64-bit Windows the 64-bit&nbsp; interpreter wscript.exe is used by default to run the script. So, you did not test if the 32-bit interpreter was blocked.The commandline from my post, executes the script like malware can do, by using 32-bit interpreter wscript.exe on 64-bit Windows. So, if you have the script helloworld.vbs in &quot;c:\scripts&quot; folder, then you have to execute the commandline:c:\Windows\SysWOW64\wscript.exe &quot;c:\scripts\helloworld.vbs&quot;If you will see the alert that Windows Script Host is blocked, then you can be sure that also 32-bit interpreter wscript.exe is blocked, for sure.Simply copy &amp; paste &amp; execute the commandline in the&nbsp; &#039;Quick access&#039; area in Windows File Explorer, or in the Command Prompt console.<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite130" alt="(y)" title="Thumbs up&nbsp; &nbsp; (y)" loading="lazy" data-shortname="(y)" /></blockquote>

[QUOTE="Andy Ful, post: 789026, member: 32260"] When you execute the script by a mouse-click, then on 64-bit Windows the [COLOR=rgb(0, 168, 133)][B]64-bit interpreter wscript.exe [/B][/COLOR]is used by default to run the script. So, you did not test if the [COLOR=rgb(184, 49, 47)][B]32-bit interpreter[/B][/COLOR] was blocked. The commandline from my post, executes the script like malware can do, by using [COLOR=rgb(184, 49, 47)][B]32-bit interpreter wscript.exe[/B][/COLOR] on 64-bit Windows. So, if you have the script helloworld.vbs in "c:\scripts" folder, then you have to execute the commandline: c:\Windows\SysWOW64\wscript.exe "c:\scripts\helloworld.vbs" If you will see the alert that Windows Script Host is blocked, then you can be sure that also [B][COLOR=rgb(184, 49, 47)]32-bit interpreter wscript.exe [/COLOR][/B]is blocked, for sure. Simply copy & paste & execute the commandline in the 'Quick access' area in Windows File Explorer, or in the Command Prompt console.(y) [/QUOTE]

Verification