AutoRuns
AutoRuns copied to clipboard
Scheduled task msiexec issue
Steps to reproduce
Get-PSAutorun -ScheduledTasks | ? { -not($_.Version) } | ogv -PassThru
Expected behavior
TBD
Actual behavior
Path : C:\Windows\system32\Tasks\fake name
Item : fake name
Category : Task
Value : msiexec /x{AABBCCDD-EEFF-AABB-CCDD-FEFFFFFFFFFF} /qn /norestart
ImagePath : msiexec /x{AABBCCDD-EEFF-AABB-CCDD-FEFFFFFFFFFF} /qn /norestart
Environment data
> $PSVersionTable
Won't fix. It's the purpose of the module. It aims at identifying what's beyond normal.
In this case, it could have uninstalled a MSI based product.
Worse, it could have been in the form of msiexec /i http://