(Image:\\msiexec.exe (CommandLine:\ \-Y* OR CommandLine:\ \/Y* OR CommandLine:\ –Y* OR CommandLine:\ —Y* OR CommandLine:\ ―Y*)) (-(CommandLine:\\MsiExec.exe\"\ \/Y\ \"C\:\\Program\ Files\\* OR CommandLine:\\MsiExec.exe\"\ \/Y\ \"C\:\\Program\ Files\ \(x86\)\\* OR CommandLine:\\MsiExec.exe\"\ \/Y\ \"C\:\\Windows\\System32\\* OR CommandLine:\\MsiExec.exe\"\ \/Y\ \"C\:\\Windows\\SysWOW64\\*))