Provider_Name:Service\ Control\ Manager EventID:7045 (ImagePath:cmd* ImagePath:\"set* ImagePath:\-f*) (ImagePath:\/c* OR ImagePath:\/r*)