great idea but can be enhanced

Hi, it would be nice if the tool can have 2 modes. 

1. Full scan mode [the one that searches all file system (the current mode)]
2. quick mode for serching just the running java processes. it can colletct the calss/jar/wars..etc loaded from the CLASS_PATH. and only look that up if its loading the infected jar.

Hope this help. I'll do it when I have time for it. and share it.