((Image:\\excel.exe OR Image:\\msaccess.exe OR Image:\\mspub.exe OR Image:\\powerpnt.exe OR Image:\\visio.exe OR Image:\\winword.exe) (TargetFilename:.bat OR TargetFilename:.cmd OR TargetFilename:.com OR TargetFilename:.dll OR TargetFilename:.exe OR TargetFilename:.hta OR TargetFilename:.ocx OR TargetFilename:.proj OR TargetFilename:.ps1 OR TargetFilename:.scf OR TargetFilename:.scr OR TargetFilename:.sys OR TargetFilename:.vbe OR TargetFilename:.vbs OR TargetFilename:.wsf OR TargetFilename:.wsh)) (-(TargetFilename:\\AppData\\Local\\assembly\\tmp\\* TargetFilename:.dll)) (-(((TargetFilename:C\:\\Users\\* TargetFilename:\\AppData\\Local\\Microsoft\\Office\\* TargetFilename:\\WebServiceCache\\AllUsers*) TargetFilename:.com) OR (Image:\\winword.exe TargetFilename:\\AppData\\Local\\Temp\\webexdelta\\* (TargetFilename:.dll OR TargetFilename:.exe)) OR ((TargetFilename:C\:\\Users\\* TargetFilename:\\AppData\\Local\\Microsoft\\Office\\* TargetFilename:\\BackstageInAppNavCache\\*) TargetFilename:.com)))