CommandLine:shutdown\\s+/r /f /t 00 OR CommandLine:net\\s+stop SuperBackupMan