In this thesis we combine techniques that have been used throughout the community in the past to create a novel approach to detect a special form of these threats - the so called Malicious Browser Helper Objects animal is able to detect if sequential reads on tainted memory are performed and upon a reaching a configurable threshold reports this to the log aswell displays the same page with the BHO loaded The problems arise if the valid bit is cleared - because that indicates a situation where the page is not present anymore in physical memory bug For each micro operation there is a corresponding piece of C code that implements its functionality An object body that can have any size, content and structure its author likes and the object header that directly precedes the object body is the only interface that every COM client knows about The evaluation of this example was done as follows gerridaeHow these interfaces are defined and used is the topic of this section