- Windows 95 uses specific keywords in program names, such as 'setup', 'install', 'inst', 'imposta', 'ayarla', and 'felrak', to guess if an installer is running.
- If the program name lacks matches, it checks if the executable path contains 'Setup' and delays file checks until the next Windows restart for cases where installers may use ExitWindowsExec to replace files via MS-DOS.
- Windows 95 also performs live file checks after installing multimedia drivers via INF files, prompted by issues where drivers overwrote system DLLs.