(TargetObject:\\Software\\Microsoft\\Windows\\CurrentVersion\\Run* OR TargetObject:\\Software\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Run* OR TargetObject:\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\Run*) ((Details:\:\\Perflogs* OR Details:\:\\ProgramData'* OR Details:\:\\Windows\\Temp* OR Details:\:\\Temp* OR Details:\\AppData\\Local\\Temp* OR Details:\\AppData\\Roaming* OR Details:\:\\$Recycle.bin* OR Details:\:\\Users\\Default* OR Details:\:\\Users\\public* OR Details:%temp%* OR Details:%tmp%* OR Details:%Public%* OR Details:%AppData%*) OR (Details:\:\\Users\\* (Details:\\Favorites* OR Details:\\Favourites* OR Details:\\Contacts* OR Details:\\Music* OR Details:\\Pictures* OR Details:\\Documents* OR Details:\\Photos*))) (-(TargetObject:\\Microsoft\\Windows\\CurrentVersion\\RunOnce\\* Image:C\:\\Windows\\SoftwareDistribution\\Download\\* (Details:rundll32.exe\ * Details:C\:\\WINDOWS\\system32\\advpack.dll,DelNodeRunDLL32*) (Details:\\AppData\\Local\\Temp\\* OR Details:C\:\\Windows\\Temp\\*))) (-((Image:C\:\\Program\ Files\\Spotify\\Spotify.exe OR Image:C\:\\Program\ Files\ \(x86\)\\Spotify\\Spotify.exe OR Image:\\AppData\\Roaming\\Spotify\\Spotify.exe) TargetObject:SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\\Spotify Details:Spotify.exe\ \-\-autostart\ \-\-minimized))