04+iuM4ZrDIFYGDwSwTQMfFiHAdSje3M1ajAGrCjWZU= 0FLLcDUA4occ9R4BXkRPKpn6mnV5rEIhBPDkEfYQe9A= DoKRhPhdnxVoG2kQtYY7X/KVifdJ9gz6HjtRy1aldKQ= YdTwfgKuzwSWT/Ue6jEGmisOqlSa0rKbX9Ph5rtUNZM= g1QRQtycONYCOH08MODkqbID4e/a8I19BgaBUMbci/c= CHv80aUTkqE7uNXMSkZma+hGAbMONNuAon6hUsDmuP8= HKLM\System\CurrentControlSet\Services\BFE\Parameters\Policy\* [*] HKLM\System\CurrentControlSet\Services\BFE\Parameters\Policy\* [*] HKLM\System\CurrentControlSet\Services\BFE\Parameters\Policy\* [*] \Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange $(@%SystemRoot%\system32\bfe.dll,-2001) $(@%SystemRoot%\system32\bfe.dll,-2002) S-1-5-18 <QueryList><Query Id="0" Path="System"><Select Path="System">*/System/Provider[@Name='Service Control Manager'] and */System/EventID='7040' and */EventData/Data[@Name='param4']='BFE'</Select></Query></QueryList> false false false false false true false false 7 Queue true %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange