(Image:\\netsh.exe OR OriginalFileName:netsh.exe) ((CommandLine:firewall* CommandLine:add* CommandLine:allowedprogram*) OR (CommandLine:advfirewall* CommandLine:firewall* CommandLine:add* CommandLine:rule* CommandLine:action=allow* CommandLine:program=*)) (CommandLine:\:\\$Recycle.bin\\* OR CommandLine:\:\\RECYCLER.BIN\\* OR CommandLine:\:\\RECYCLERS.BIN\\* OR CommandLine:\:\\SystemVolumeInformation\\* OR CommandLine:\:\\Temp\\* OR CommandLine:\:\\Users\\Default\\* OR CommandLine:\:\\Users\\Desktop\\* OR CommandLine:\:\\Users\\Public\\* OR CommandLine:\:\\Windows\\addins\\* OR CommandLine:\:\\Windows\\cursors\\* OR CommandLine:\:\\Windows\\debug\\* OR CommandLine:\:\\Windows\\drivers\\* OR CommandLine:\:\\Windows\\fonts\\* OR CommandLine:\:\\Windows\\help\\* OR CommandLine:\:\\Windows\\system32\\tasks\\* OR CommandLine:\:\\Windows\\Tasks\\* OR CommandLine:\:\\Windows\\Temp\\* OR CommandLine:\\Downloads\\* OR CommandLine:\\Local\ Settings\\Temporary\ Internet\ Files\\* OR CommandLine:\\Temporary\ Internet\ Files\\Content.Outlook\\* OR CommandLine:%Public%\\* OR CommandLine:%TEMP%* OR CommandLine:%TMP%*)