(Image:\\MpCmdRun.exe OR OriginalFileName:MpCmdRun.exe) (CommandLine:\ \-RemoveDefinitions* CommandLine:\ \-All*)