add logon services driver task detect