Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\microsoftupdater.exe
- <SYSTEM32>\tasks\windowsthemeservice
- %APPDATA%\microsoft\windows\themes\microsoftupdater.exe
- '%WINDIR%\syswow64\schtasks.exe' /create /tn "WindowsThemeService" /tr "%APPDATA%\Microsoft\Windows\Themes\MicrosoftUpdater.exe" /sc onlogon /f
- '%WINDIR%\syswow64\schtasks.exe' /create /tn "WindowsThemeService" /tr "%APPDATA%\Microsoft\Windows\Themes\MicrosoftUpdater.exe" /sc onlogon /f' (with hidden window)