eugeny gladkih wrote:
>>>>>> "MS" == Michael Scheidell <scheidell@secnap.net> writes:
> >> 1. kill shstart.exe process

> MS> Wouldn't you have to be administrator to kill shstart.exe?

> LocalSystem account has more privilegies then administrator's one.

If you've already got Administrator, you can just run

at <time> /interactive "cmd.exe"

and get a shell as SYSTEM.