Technical Information
- %WINDIR%\Tasks\winupdate.job
- %TEMP%\aut5.tmp
- %HOMEPATH%\Windows-Update\3.exe
- %TEMP%\aut4.tmp
- %HOMEPATH%\Windows-Update\5.exe
- %TEMP%\aut6.tmp
- %HOMEPATH%\Windows-Update\4.exe
- %TEMP%\aut2.tmp
- %HOMEPATH%\Windows-Update\0.exe
- %TEMP%\aut1.tmp
- %HOMEPATH%\Windows-Update\2.exe
- %TEMP%\aut3.tmp
- %HOMEPATH%\Windows-Update\1.exe
- %TEMP%\aut4.tmp
- %TEMP%\aut5.tmp
- %TEMP%\aut6.tmp
- %TEMP%\aut1.tmp
- %TEMP%\aut2.tmp
- %TEMP%\aut3.tmp
- '%HOMEPATH%\Windows-Update\2.exe'
- '<SYSTEM32>\cmd.exe' /C echo Y|schtasks /create /TN winupdate /sc MINUTE /mo 30 /TR "%HOMEPATH%\Windows-Update\1.exe"
- '<SYSTEM32>\schtasks.exe' /create /TN winupdate /sc MINUTE /mo 30 /TR "%HOMEPATH%\Windows-Update\1.exe"
- '<SYSTEM32>\schtasks.exe' /delete /f /TN winupdate
- '<SYSTEM32>\cmd.exe' /C echo Y|schtasks /delete /f /TN winupdate
- '<SYSTEM32>\cmd.exe' /S /D /c" echo Y"