(ImageLoaded:\\RstrtMgr.dll OR OriginalFileName:RstrtMgr.dll) ((Image:\:\\Perflogs\\* OR Image:\:\\Users\\Public\\* OR Image:\\Temporary\ Internet*) OR ((Image:\:\\Users\\* Image:\\Favorites\\*) OR (Image:\:\\Users\\* Image:\\Favourites\\*) OR (Image:\:\\Users\\* Image:\\Contacts\\*)))