(Image:\\powershell.exe OR OriginalFileName:PowerShell.EXE) ((CommandLine:Set\-Service* CommandLine:\-StartupType*) (CommandLine:Disabled* OR CommandLine:Manual*))