I believe some of the bots out there are using flash and using the actual evony flash client to connect to the server (I might be wrong)

In that case, i think its possible that evony could include flash software that can look inside the flash virtual machine to see if there is any other code that is running concurrently inside the flash environment.

Outside the flash environment, well its possible for a flash movie to communicate with javascript running on the page... so potentially it could be doable to detect if the evony flash app is running in the proper html page.

I dont think they could go look into ANY part of my RAM (they can go look in SOME part of my RAM)

In particular, they cant detect a bot that is totally external to the browser.

The only think they can see is how the actions taken by a bot. So far example, if a "click" bot always click on the exact same pixel of the same button, then they could assume its a bot.

This kind of detection could easily by overcome by the bot, by introducing some random fuzz in the click position.