Technical Information
- <SYSTEM32>\tasks\windowsupdate
- '%WINDIR%\syswow64\cmd.exe' schtasks /create /tn "WindowsUpdate" /tr "%APPDATA%\svchost.exe" /sc onlogon /f' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' schtasks /create /tn "WindowsUpdate" /tr "%APPDATA%\svchost.exe" /sc onlogon /f
- '%WINDIR%\syswow64\schtasks.exe' /create /tn "WindowsUpdate" /tr "%APPDATA%\svchost.exe" /sc onlogon /f