(Image:\\reg.exe (CommandLine:HKEY_CURRENT_USER\\Control\ Panel\\Desktop* OR CommandLine:HKCU\\Control\ Panel\\Desktop*)) ((CommandLine:\/v\ ScreenSaveActive* CommandLine:\/t\ REG_SZ* CommandLine:\/d\ 1* CommandLine:\/f*) OR (CommandLine:\/v\ ScreenSaveTimeout* CommandLine:\/t\ REG_SZ* CommandLine:\/d\ * CommandLine:\/f*) OR (CommandLine:\/v\ ScreenSaverIsSecure* CommandLine:\/t\ REG_SZ* CommandLine:\/d\ 0* CommandLine:\/f*) OR (CommandLine:\/v\ SCRNSAVE.EXE* CommandLine:\/t\ REG_SZ* CommandLine:\/d\ * CommandLine:.scr* CommandLine:\/f*))