Editing file:
43ee7b2a373632f9a701249fd96d0edec2ff1279.xml
<?xml version="1.0" encoding="utf-16"?> <assembly xmlns="urn:schemas-microsoft-com:asm.v3" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" manifestVersion="1.0"> <memberships> <categoryMembership> <id name="Microsoft.Windows.Categories.Services" typeName="Service" version="10.0.20348.1" publicKeyToken="31bf3856ad364e35" /> <categoryInstance subcategory="UsoSvc"> <serviceData dependOnService="rpcss" description="@%systemroot%\system32\usosvc.dll,-102" displayName="@%systemroot%\system32\usosvc.dll,-101" errorControl="normal" imagePath="%systemroot%\system32\svchost.exe -k netsvcs -p" name="UsoSvc" objectName="LocalSystem" requiredPrivileges="SeAuditPrivilege,SeCreateGlobalPrivilege,SeCreatePageFilePrivilege,SeTcbPrivilege,SeAssignPrimaryTokenPrivilege,SeImpersonatePrivilege,SeIncreaseQuotaPrivilege,SeShutdownPrivilege,SeDebugPrivilege,SeBackupPrivilege,SeRestorePrivilege,SeSecurityPrivilege,SeTakeOwnershipPrivilege,SeLoadDriverPrivilege,SeManageVolumePrivilege,SeSystemEnvironmentPrivilege,SeCreateSymbolicLinkPrivilege,SeIncreaseBasePriorityPrivilege" sidType="unrestricted" start="delayedAuto" type="win32ShareProcess"> <securityDescriptor name="UsoSvcServiceSecurity" /> <failureActions resetPeriod="86400"> <actions> <action type="restartService" delay="120000" /> <action type="restartService" delay="300000" /> <action type="none" delay="0" /> </actions> </failureActions> </serviceData> </categoryInstance> </categoryMembership> </memberships> <trustInfo> <security> <accessControl> <securityDescriptorDefinitions> <securityDescriptorDefinition name="UsoSvcServiceSecurity" sddl="D:(A;;CCLCSWRPLORC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOSDRCWDWO;;;WD)" /> </securityDescriptorDefinitions> </accessControl> </security> </trustInfo> </assembly>