((OriginalFileName:net.exe OR OriginalFileName:net1.exe) OR (Image:\\net.exe OR Image:\\net1.exe)) CommandLine:\ stop\ *