((Image:\\taskkill.exe OR OriginalFileName:taskkill.exe) (CommandLine:\ \-f\ * OR CommandLine:\ \/f\ * OR CommandLine:\ –f\ * OR CommandLine:\ —f\ * OR CommandLine:\ ―f\ * OR CommandLine:\ \-f OR CommandLine:\ \/f OR CommandLine:\ –f OR CommandLine:\ —f OR CommandLine:\ ―f) (CommandLine:\ \-im\ * OR CommandLine:\ \/im\ * OR CommandLine:\ –im\ * OR CommandLine:\ —im\ * OR CommandLine:\ ―im\ * OR CommandLine:\ \-pid\ * OR CommandLine:\ \/pid\ * OR CommandLine:\ –pid\ * OR CommandLine:\ —pid\ * OR CommandLine:\ ―pid\ *)) (-((ParentImage:\\AppData\\Local\\Temp\\* OR ParentImage:\:\\Windows\\Temp*) ParentImage:.tmp))