i believe that it scans when you log on to bnet. It blocks people from firing up bots and detects suspicious .dll's. There are ways to workaround some of the problems...