(Image:\\reg.exe OR OriginalFileName:reg.exe) (CommandLine:\ del* CommandLine:\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\RunMRU*)