Systems and methods for managing pestware are described. One system
includes a pestware shield configured to detect pestware activity on a
protected computer; a heuristics engine configured to identify repeat
pestware activity; a drive scan module configured to scan files stored on
the storage device and to identify pestware in the scanned files; a
program memory scan module configured to scan programs running in the
program memory of the protected computer and to identify pestware in the
scanned programs; a registry scan module configured to identify any
attempts to change data in the registry file; and a quarantine module
configured to quarantine the pestware identified by either the drive scan
module or the program memory module.