((Image:\\rundll32.exe OR OriginalFileName:RUNDLL32.EXE) (CommandLine:,RunDLL OR CommandLine:,Control_RunDLL)) (-((CommandLine:.dll,Control_RunDLL OR CommandLine:.dll\",Control_RunDLL OR CommandLine:.dll',Control_RunDLL) OR ParentImage:\\tracker.exe))