(Image:\\sc.exe (CommandLine:create* OR CommandLine:config*) (CommandLine:binPath* CommandLine:type* CommandLine:kernel*)) (-((CommandLine:create\ netprotection_network_filter* CommandLine:type=\ kernel\ start=\ * CommandLine:binPath=\ System32\\drivers\\netprotection_network_filter* CommandLine:DisplayName=\ netprotection_network_filter* CommandLine:group=\ PNP_TDI\ tag=\ yes*) OR (CommandLine:create\ avelam\ binpath=C\:\\Windows\\system32\\drivers\\avelam.sys* CommandLine:type=kernel\ start=boot\ error=critical\ group=Early\-Launch*)))