(Provider_Name:Service\ Control\ Manager EventID:7045) (ServiceName:PAExec\-* OR ImagePath:C\:\\WINDOWS\\PAExec\-*)