Secondly, I’d attempt to write a bash script to walk a directory tree, cat out files, pipe it through grep and get every instance where VirtualBox is mentioned in a file. Trying the name of proccess, or of the executable too.

Move to the top of the tree you want to search and do something like this:

find . -type f -exec grep -iH “virtualboxexecutable” {} ;

That will give you what you want without the need for a script. -type f makes the find command only search files, and -exec has it run the grep command on any files it returns with -iH giving you case insensitive results showing you the file it’s found in. Substitute ‘virtualboxexecutable’ with whatever the process name is that is being run. If you want to ignore binary files, the add in "| grep -iv “binary file matches” to the command. That will strip out any results where it has searched a binary file.