improved simple dos detection