powershell.exe "powershell.exe" Remove -ItemProperty -Path 'HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Run' -Name 'WHost';New-ItemProperty -Path 'HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Run' -Name 'WHost' -Value '"C:\Users\test22\AppData\Roaming\WHost\WHost.exe"' -PropertyType 'String'
2776cmd.exe "cmd" /C schtasks /create /tn \WHost /tr "C:\Users\test22\AppData\Roaming\WHost\WHost.exe" /st 00:00 /du 9999:59 /sc once /ri 60 /rl HIGHEST /f
2824schtasks.exe schtasks /create /tn \WHost /tr "C:\Users\test22\AppData\Roaming\WHost\WHost.exe" /st 00:00 /du 9999:59 /sc once /ri 60 /rl HIGHEST /f
2896