(((CommandLine:\ \-create\ * OR CommandLine:\ \/create\ * OR CommandLine:\ –create\ * OR CommandLine:\ —create\ * OR CommandLine:\ ―create\ * OR CommandLine:\ \-delete\ * OR CommandLine:\ \/delete\ * OR CommandLine:\ –delete\ * OR CommandLine:\ —delete\ * OR CommandLine:\ ―delete\ * OR CommandLine:\ \-query\ * OR CommandLine:\ \/query\ * OR CommandLine:\ –query\ * OR CommandLine:\ —query\ * OR CommandLine:\ ―query\ * OR CommandLine:\ \-change\ * OR CommandLine:\ \/change\ * OR CommandLine:\ –change\ * OR CommandLine:\ —change\ * OR CommandLine:\ ―change\ * OR CommandLine:\ \-run\ * OR CommandLine:\ \/run\ * OR CommandLine:\ –run\ * OR CommandLine:\ —run\ * OR CommandLine:\ ―run\ * OR CommandLine:\ \-end\ * OR CommandLine:\ \/end\ * OR CommandLine:\ –end\ * OR CommandLine:\ —end\ * OR CommandLine:\ ―end\ *) (CommandLine:\ \-tn\ * OR CommandLine:\ \/tn\ * OR CommandLine:\ –tn\ * OR CommandLine:\ —tn\ * OR CommandLine:\ ―tn\ * OR CommandLine:\ \-tr\ * OR CommandLine:\ \/tr\ * OR CommandLine:\ –tr\ * OR CommandLine:\ —tr\ * OR CommandLine:\ ―tr\ * OR CommandLine:\ \-sc\ * OR CommandLine:\ \/sc\ * OR CommandLine:\ –sc\ * OR CommandLine:\ —sc\ * OR CommandLine:\ ―sc\ * OR CommandLine:\ \-st\ * OR CommandLine:\ \/st\ * OR CommandLine:\ –st\ * OR CommandLine:\ —st\ * OR CommandLine:\ ―st\ * OR CommandLine:\ \-ru\ * OR CommandLine:\ \/ru\ * OR CommandLine:\ –ru\ * OR CommandLine:\ —ru\ * OR CommandLine:\ ―ru\ * OR CommandLine:\ \-fo\ * OR CommandLine:\ \/fo\ * OR CommandLine:\ –fo\ * OR CommandLine:\ —fo\ * OR CommandLine:\ ―fo\ *)) (-CommandLine:schtasks*)) OR (OriginalFileName:schtasks.exe (-Image:\\schtasks.exe))