Just do a search for all the files that have changed in the last day. You'll have a long list, but your packet file will be in there.

Can't say I ever heard of a sniffer trojan...