Element 'malware persistence detection'