This is just a guess from what I know of comps, but wouldn't it be possible for varant to scan the programs currently running in memory?
Somewhat in the way that a virus scanner checks for any viruses currently in memory.
It's a theory. Feel free to blow it out of the water.
-1018