It don't have to be active in your active ram...
A few months ago i got booted in 2142 for the c@t gateway string in my IRC log (log reload disabled)
After i found out the problem i deleted the entry from the log and putted the string in a file called blabla on my HDD
Rebooted the PC and wen't back to 2142, after 20mins kicked again for the same violation.
Removed the line, ater that i added the string to a php file and uploaded it.
Rebooted again and visited the php page and went playing, booted again.
After a reboot still kicked... so when the string is found in your pc active memory or a file you still will be booted.
IE cache is so nice