installer heuristics

Windows 95 detected likely setup programs with a simple but consequential guess: it looked for installer-like words in the program name, fell back to checking whether the program was running from a setup-like path, and then used that signal to decide when to check whether protected system files...