Detecting DLL threats