Having watched a little of CCCen recent proceedings, and listening to Security Now, along with ATT Threattraq, I am left thinking that. After all, remember the Sony rootkit on CD's, which put a parser in that would not reveal any DLL starting with $$, even to the OS, so I naturally had a small desktop file called $$syscanary.dll on the desktop. Kind of there as a reminder. Was just a small text file I renamed.