it is executing via an Active Directory logon script with only the command of kix32.exe

btw, i love your quote lol