1. A computer-implemented method for detection of items stored in a computer system such as computer code, data or information, the method comprising obtaining a signature by reading code comprising at least part of a program capable of introducing the items, the code incorporating sufficient data to characterise the program adequately, using the code as the signature, comparing the signature with files stored on the computer system, and, if a match with the signature is found, providing an indication thereof.