[John Rogers]

If you have C++ installed you can write a small program to take a look at segment 0, offset 1054 (41E hex) and see what is also taking a "peek" at it. Even with new systems I think the keyboard buffer is still in the same place memory wise so it would be easy to watch it. Another option would be to do a code dump to an ASM file and search for that address and see if anything is watching the buffer. It is very easy to add about a dozen lines of assembly code to a dll or other utility program and have it sneek under the radar.