1. A method for scanning a computer memory for pestware, comprising: identifying, within an executable object in the computer memory, a reference to a known procedure, the known procedure having a fixed address in the computer memory; and searching for a predetermined check value at a known offset relative to an address, in the computer memory, of the reference to the known procedure.