((Image:\\Autoit3.exe OR OriginalFileName:AutoIt3.exe) (ParentImage:\\cmd.exe OR ParentImage:\\KeyScramblerLogon.exe OR ParentImage:\\msiexec.exe)) (-(Image:\:\\Program\ Files\ \(x86\)\\AutoIt3\\AutoIt3.exe OR Image:\:\\Program\ Files\\AutoIt3\\AutoIt3.exe))