Abstract: A system and method for reducing false positive indications of pestware on a protected computer is disclosed. In one variation, the method includes tracking activities of a user at the protected computer, monitoring events at the protected computer, identifying events that are potentially indicative of pestware, comparing at least one of the events with at least one of the activities of the user and initiating, in response to the comparing indicating the activities of the user are unconnected with the events, a user prompt that informs the user about the events to enable the user to make a decision relative to managing the events.

Abstract: A system and method for managing pestware on protected computers are described. One embodiment is configured to generating a log file containing information indicative of pestware activity on a protected computer, send the log file to a host, and in return, receive a customized file from the host that includes customized instructions to alter consequences of the pestware activity on the protected computer. When executed at the protected computer, the customized instructions alter the consequences of the pestware on the protected computer.

Abstract: Systems for preventing pestware activity are described. One embodiment a heuristic engine configured to identify repeat pestware activity and configured to block the repeat pestware activity; an operating system pestware shield in communication with the heuristic engine, the operating system pestware shield configured to detect pestware activity and report the pestware activity to the heuristic engine; and a browser pestware shield in communication with the heuristic engine, the browser pestware shield configured to detect pestware activity and report the pestware activity to the heuristic engine.