(FileName:.hive OR FileName:.reg) (-(Image:C\:\\Program\ Files\ \(x86\)\\* OR Image:C\:\\Program\ Files\\* OR Image:C\:\\Windows\\System32\\* OR Image:C\:\\Windows\\SysWOW64\\*))