Well I suppose you could setup a fake update server, and use the hosts file to point that software to it, but if you can do that, why not just install a backdoor on the box instead of waiting for the guy to auto update his box?