(Image:\\eqnedt32.exe OR Image:\\wordpad.exe OR Image:\\wordview.exe OR Image:\\cmdl32.exe OR Image:\\certutil.exe OR Image:\\certoc.exe OR Image:\\CertReq.exe OR Image:\\bitsadmin.exe OR Image:\\Desktopimgdownldr.exe OR Image:\\esentutl.exe OR Image:\\expand.exe OR Image:\\extrac32.exe OR Image:\\replace.exe OR Image:\\mshta.exe OR Image:\\ftp.exe OR Image:\\Ldifde.exe OR Image:\\RdrCEF.exe OR Image:\\hh.exe OR Image:\\finger.exe OR Image:\\findstr.exe) (TargetFilename:\:\\Perflogs* OR TargetFilename:\:\\ProgramData\\* OR TargetFilename:\:\\Temp\\* OR TargetFilename:\:\\Users\\Public\\* OR TargetFilename:\:\\Windows\\* OR TargetFilename:\\$Recycle.Bin\\* OR TargetFilename:\\AppData\\Local\\* OR TargetFilename:\\AppData\\Roaming\\* OR TargetFilename:\\Contacts\\* OR TargetFilename:\\Desktop\\* OR TargetFilename:\\Favorites\\* OR TargetFilename:\\Favourites\\* OR TargetFilename:\\inetpub\\wwwroot\\* OR TargetFilename:\\Music\\* OR TargetFilename:\\Pictures\\* OR TargetFilename:\\Start\ Menu\\Programs\\Startup\\* OR TargetFilename:\\Users\\Default\\* OR TargetFilename:\\Videos\\*)