(Provider_Name:Service\ Control\ Manager EventID:7045) (ServiceName:BTOBTO OR (ImagePath:.bat\ &\ del\ * OR ImagePath:__output\ 2\^>\^&1\ >*))