((Image:\\netsh.exe OR OriginalFileName:netsh.exe) (CommandLine:firewall* CommandLine:delete\ *)) (-((ParentImage:\\Dropbox.exe CommandLine:name=Dropbox*) OR (ParentImage:\\instup.exe CommandLine:advfirewall\ firewall\ delete\ rule\ name=\"Avast\ Antivirus\ Admin\ Client\"*)))