I have found more information about it... Task Scheduler is taskeng.exe, and ehome/mcupdater.exe is the Windows Media Centre updater.
Does it get confused between the two mcupdater.exe's?
In essence, Yes it's getting confused between the two.
But technically it is not The Windows Media Center process name is fortunate enough to benefit from our own access protection rule implementation.
They are an exact match in process names, but it's close enough for the rule to match.
You get the trigger because the TaskEng.exe process requested access to the Mcupdater.exe process with enough privileges to be able to terminate that process.
Whether the TaskEng.exe process had intent to do so or not is indeterminate (usually not the case) but our rule doesn't make that distinction. We trigger based on the requesting process being capable of terminating.