Without wanting to inflame the discussion too much but .....
.. is it possible to intercept the reply on the way out (using socklisten/sockwrite). Capture the version reply and replace it with something else!
That way the .exe is not being altered, and the user (for whatever reason) can keep their version "hush hush".
Food for thought!
DK
