Yes, as long as the anti-malware program recognizes it. <img src="/ubbthreads/images/graemlins/smile.gif" alt="" />
And that's the weakest point : A thing that cannot be recognized cannot be detected.
But - there's astill a chance : Heuristics. Programs tend to incorporate a certain behaviour. Silently hooking into the keyboard and listening and then sending the results via e-mail or chat-bots "home" isn't a behaviour a normal office program would incorporate. <img src="/ubbthreads/images/graemlins/smile.gif" alt="" /> (But on the other hand ...) The only difficulty woiuld lie in the hooks - in this example. *Every* program that relies on the keyboard needs some kind of input from the keyboard. So it listens to the keyboard (or, to be more exact, the OS does). The only difference is in the handling : Would it be secretly or open ? Would the program do its very best to hide itself and not to be detected ? I don't think that an office program would do that. <img src="/ubbthreads/images/graemlins/winkwink.gif" alt="" />
That's Heuristics, in a nutshell. Nowadays, things get more & more evolved. The current development for future Heuristics is basically this : Even now, behaviour patterns are analysed and used in neuronal networks (if i understood this correctly) to analyse malware. But the systenms that doi that are extremely slow, due to the complexity of possible behaviour schemes. This might improve, though, so that these intelligent behaviour-detecting systems might be small enough one day to become incorporated into a small scanner. <img src="/ubbthreads/images/graemlins/smile.gif" alt="" />
