(Provider_Name:Service\ Control\ Manager EventID:7045) ((ImagePath:\\rutserv.exe* ImagePath:\-service*) OR ServiceName:Remote\ Utilities\ \-\ Host)