1. A non-transitory computer readable medium comprising computer instructions stored thereon to cause one or more processing units to: receive an indication of detection of unwanted code, the unwanted code accessible from a computer system; identify a file in response to the indication of detection, the identified file utilized to automatically initiate execution of code in the computer system; determine whether an identifier associated with the unwanted code is included in the identified file; and classify the identified file as unwanted based on the determination.