ParentImage:\\more.com (Image:\\vbc.exe OR OriginalFileName:vbc.exe)