(TargetFilename:\\WerFault.exe OR TargetFilename:\\wer.dll) (-((TargetFilename:C\:\\Windows\\SoftwareDistribution\\* OR TargetFilename:C\:\\Windows\\System32\\* OR TargetFilename:C\:\\Windows\\SysWOW64\\* OR TargetFilename:C\:\\Windows\\WinSxS\\* OR TargetFilename:C\:\\Windows\\UUS\\*) OR Image:\\wuaucltcore.exe))