"As instructed, it will check for things like registry strings and running processes and files, such as executables and DLLs." . . . . .