powershell.exe "powershell.exe" Remove -ItemProperty -Path 'HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Run' -Name 'EBSMEDIA';New-ItemProperty -Path 'HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Run' -Name 'EBSMEDIA' -Value '"C:\Users\test22\AppData\Roaming\EBSMEDIA\EBSMEDIA.exe"' -PropertyType 'String'
2052cmd.exe "cmd" /C schtasks /create /tn \EBSMEDIA /tr "C:\Users\test22\AppData\Roaming\EBSMEDIA\EBSMEDIA.exe" /st 00:00 /du 9999:59 /sc once /ri 60 /rl HIGHEST /f
2100schtasks.exe schtasks /create /tn \EBSMEDIA /tr "C:\Users\test22\AppData\Roaming\EBSMEDIA\EBSMEDIA.exe" /st 00:00 /du 9999:59 /sc once /ri 60 /rl HIGHEST /f
2164