Yes, you are probably right. Also, they can "hide" the program so it doesn't show up under task manager so you don't know that it is running.
As for AV software... if they were in bed with the FBI then they wouldn't make it part of their pattern files.
Might be able to hide it in the home versions of Windows...but would they be able to do that in the NT/2000 variants?