Abstract: A system for processing of errors, including an emulator configured for replicating a state of a computer system so as to trigger an application execution error, and obtaining a cause of the error; an expert system configured for generating a scenario for processing of the error based on the cause; and updating a database that contains an identifier of the error, the cause, the state of the computer and the scenario, including updating an error tree that maintains cumulative information about the errors; and an error processor configured for identifying an occurrence of the error, loading the scenario from the database, and running the scenario.

Abstract: A system and method that handles and prevents application installation and execution errors in computer systems using an expert data acquired by analysis of the application and errors detected in the emulator. The system also handles the errors raised during an application update. The system allows for testing of applications for execution on a system with a particular configuration. The system can determine all possible errors that can be raised in different execution environments. Additionally, the system can determine system error causes and modify the computer system in order to prevent the system errors. An automated analysis of the application execution in the emulated execution environment is performed. An expert system of error handling scenarios is formed based on the emulation. The system includes an emulator, an expert system, an expert database and an error processor.

Abstract: A system, method and computer program product for identifying new variants of certain data objects, for example, malware-carrying files, including (a) dividing a file into a plurality of N pieces; (b) for each of the N pieces, calculating an average value of bytes in that piece; (c) generating a furl of length N elements, wherein each element of the furl has a value that represents the average value of its corresponding file piece; (d) calculating the distance between the furl and a second furl that corresponds to the file known to contain malware; and (e) based on the distance, determining whether the file is likely to carry a malicious object. The malicious object is, for example, a trojan, a virus, a rootkit or a worm. The second furl can be selected by comparing file size, and taking into account whether the file is packed. The furl elements are bytes, words, half words, etc. The distance is calculated based on, e.g.