(CommandLine:SC\ Scheduled\ Scan* CommandLine:\\microsoft\\Taskbar\\autoit3.exe*) OR (Image:\\Windows\\Temp\\DB\\* Image:.exe) OR (Image:C\:\\Windows\\system32\\Service.exe (CommandLine:i* OR CommandLine:u*)) OR (ParentImage:\\local\\microsoft\\Taskbar\\autoit3.exe (CommandLine:nslookup.exe* CommandLine:\-q=TXT*))