((DestinationPort:5985 OR DestinationPort:5986) Initiated:true SourceIsIpv6:false) (-(((User:NETWORK\ SERVICE* OR User:NETZWERKDIENST* OR User:SERVICIO\ DE\ RED* OR User:SERVIZIO\ DI\ RETE*) OR (User:SERVICE\ R* User:SEAU*)) OR ((SourceIp:\:\:1 OR SourceIp:127.0.0.1) (DestinationIp:\:\:1 OR DestinationIp:127.0.0.1)))) (-(Image:C\:\\Program\ Files\\Avast\ Software\\Avast\\AvastSvc.exe OR Image:C\:\\Program\ Files\ \(x86\)\\Avast\ Software\\Avast\\AvastSvc.exe))