New signature module that reports if malware attempts to stop active services.  The list of service names are included in the matching.