[code=BatchFile]@echo off>> c:\rdp.log (echo %date% %time%netstat -an|find /i ":3389"|find /i "ESTABLISHED")start explorer.exe[/code]