(ImageLoaded:\\RstrtMgr.dll OR OriginalFileName:RstrtMgr.dll) (-((Image:C\:\\$WINDOWS.\~BT\\'* OR Image:C\:\\$WinREAgent\\'* OR Image:C\:\\Program\ Files\ \(x86\)\\'* OR Image:C\:\\Program\ Files\\'* OR Image:C\:\\ProgramData\\'* OR Image:C\:\\Windows\\explorer.exe'* OR Image:C\:\\Windows\\SoftwareDistribution\\'* OR Image:C\:\\Windows\\SysNative\\'* OR Image:C\:\\Windows\\System32\\'* OR Image:C\:\\Windows\\SysWOW64\\'* OR Image:C\:\\Windows\\WinSxS\\'* OR Image:C\:\\WUDownloadCache\\'*) OR (Image:C\:\\Users\\'* (Image:\\AppData\\Local\\Temp\\is\-* Image:.tmp\\*) Image:.tmp) OR Image:C\:\\Windows\\Temp\\'*)) (-(Image:C\:\\Users\\* Image:\\AppData\\Local\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe))