(CommandLine:Microsoft\\Windows\\CurrentVersion\\Run* CommandLine:C\:\\users\\Public\\*) OR (CommandLine:del\ \/s\ \/f\ \/q\ c\:\\* CommandLine:\*.bac* CommandLine:\*.bak* CommandLine:\*.bkf*) OR ((Image:\\net.exe OR Image:\\net1.exe) (CommandLine:\ stop\ * CommandLine:\ \/y*) (CommandLine:samss* OR CommandLine:audioendpointbuilder* OR CommandLine:unistoresvc_* OR CommandLine:AcrSch2Svc*))