generally, (fill in the blank) antivirus software compares file sizes (checking for added code when none is expected), looks for replicating instructions, and searches for unusual file activity.