(Image:\\rundll32.exe OR OriginalFileName:RUNDLL32.EXE OR CommandLine:rundll32*) (CommandLine:#\+* OR CommandLine:#\-* OR CommandLine:#0* OR CommandLine:#655* OR CommandLine:#656*)