(TargetObject:\\Microsoft\\Windows\ NT\\CurrentVersion\\Event\ Viewer\\MicrosoftRedirectionProgram* OR TargetObject:\\Microsoft\\Windows\ NT\\CurrentVersion\\Event\ Viewer\\MicrosoftRedirectionURL*) (-((Image:C\:\\WINDOWS\\system32\\svchost.exe TargetObject:\\Microsoft\\Windows\ NT\\CurrentVersion\\Event\ Viewer\\MicrosoftRedirectionProgram Details:%%SystemRoot%%\\PCHealth\\HelpCtr\\Binaries\\HelpCtr.exe) OR (Image:C\:\\WINDOWS\\system32\\svchost.exe TargetObject:\\Microsoft\\Windows\ NT\\CurrentVersion\\Event\ Viewer\\MicrosoftRedirectionProgramCommandLineParameters Details:\-url\ hcp\:\/\/services\/centers\/support*topic=%%s) OR Details:http\:\/\/go.microsoft.com\/fwlink\/events.asp OR Details:\(Empty\)))