(TargetObject:System\\CurrentControlSet\\Services\\VSS* Image:esentutl.exe) (-TargetObject:System\\CurrentControlSet\\Services\\VSS\\Start*)