Here are the red flags that a program like this would (and does) exhibit:
: The tool specialized in specific malware strains. It became famous for hunting down browser hijackers (StartPage variants), adware, and heavily obfuscated trojans such as the Vundo Trojan (which injected ad popups directly into system files).