((Image:\\rar.exe OR Description:Command\ line\ RAR) OR (CommandLine:.exe\ a\ * OR CommandLine:\ a\ \-m*)) ((CommandLine:\ \-hp* CommandLine:\ \-r\ *) (CommandLine:\ *\:\\\*.* OR CommandLine:\ *\:\\\\\*.* OR CommandLine:\ *\:\\$Recycle.bin\\* OR CommandLine:\ *\:\\PerfLogs\\* OR CommandLine:\ *\:\\Temp* OR CommandLine:\ *\:\\Users\\Public\\* OR CommandLine:\ *\:\\Windows\\* OR CommandLine:\ %public%*))