Yes, and I am thinking how to make this watchdog, in simpler manner, no memory hog, and which text to look for.Did you read my advice in post #9 above? Just having a watchdog on a few selected files helps you to discover the infection at its start.
Though still hoping I may find similar thing in the internet.