How heuristic analysis and System Watcher work in Kaspersky Internet Security