摘要: A method is disclosed, where some embodiments of the include installing at least one benign malware indicator on or more computing devices, monitoring devices for presence indicator, and responsive to determining no longer present, sending a notification indicating detected as present devices. Other performing an antivirus scan identifying unauthorized software programs. An apparatus non-transitory computer-readable media storing instructions capable similar actions, latter in conjunction with computer executing stored media, are also disclosed.