quote:
Originally posted by Vimto
C:\Users\JADE\AppData\Roaming\kerne1.exe
Ahaha likely a Sub7 trojan. End the task firstly. Secondly as shitty as it is enable the Windows Firewall. Then you can start to post the log.
If you want to catch them then extract the .bat file to your desktop when they are connected (Windows firewall needs to be off) run the bat file and it will create a log file on your C drive and end the process so they are forced to disconnect. Then you can post the file here (C:\log.txt).
And we can maybe see whats going on
.
But thats my story.
The End.
/ 
Attachment: 
