Warning from Party

[jaydub]

TStone,

Unlikely, the most common detection would be to examine the list of running processes for known "bad" process names. Next up would be a registry scan for known "bad" keys.

The packet sniffing approach is problematic on multiple levels and unlikely to be more effective than even the first listed option.

J