Abstract: Disclosed are methods, systems and computer program products for antivirus checking of software objects in a virtual environment. An example method includes monitoring and identifying, by an antivirus agent running on a virtual machine in the virtual environment, an event occurring in the virtual machine, an object related to the event, and a type of the object; upon determining that the object needs an antivirus checking, sending, by the antivirus agent, to a control module in the virtual environment, information of the object and the event; determining, by the control module, priorities of executing one or more antivirus checking methods determined for the object; and distributing, by the control module, among one or more selected components of an antivirus system in the virtual environment, the one or more antivirus checking methods to be performed on the object based on the priorities.

Abstract: Disclosed are systems, methods and computer readable medium for updating software of templates of virtual machines. An example method includes determining a first coefficient indicative of a level of importance of a continuous operation of one or more virtual machines created from a virtual machine template; determining a second coefficient indicative of a level of criticality of software updates on the one or more virtual machines created from the virtual machine template; determining a third coefficient as a function of the first coefficient and the second coefficient; and when the third coefficient exceeds a threshold, updating the software on the virtual machine template to generate an updated virtual machine template.

Abstract: Disclosed are methods, systems and computer program products for antivirus checking of software objects in a virtual environment. An example method includes monitoring and identifying, by an antivirus agent running on a virtual machine in the virtual environment, an event occurring in the virtual machine, an object related to the event, and a type of the object; upon determining that the object needs an antivirus checking, sending, by the antivirus agent, to a control module in the virtual environment, information of the object and the event; determining, by the control module, priorities of executing one or more antivirus checking methods determined for the object; and distributing, by the control module, among one or more selected components of an antivirus system in the virtual environment, the one or more antivirus checking methods to be performed on the object based on the priorities.

Abstract: Disclosed are systems, methods and computer readable medium for updating software of templates of virtual machines. An example method includes determining a first coefficient indicative of a level of importance of a continuous operation of one or more virtual machines created from a virtual machine template; determining a second coefficient indicative of a level of criticality of software updates on the one or more virtual machines created from the virtual machine template; determining a third coefficient as a function of the first coefficient and the second coefficient; and when the third coefficient exceeds a threshold, updating the software on the virtual machine template to generate an updated virtual machine template.

Abstract: Disclosed are system and method for malware detection on virtual machines. An example method comprises: forming, on a virtual machine, a queue of identifiers of objects for malware analysis; determining a method for selecting objects in the queue for malware analysis; selecting one or more objects from the queue for malware analysis; providing identifiers of the selected objects to a security virtual machine for malware analysis; checking, by the security virtual machine, whether each of the selected objects has been previously provided for malware analysis by another virtual machine; when a selected object has not been previously provided by another virtual machine, performing, by the security virtual machine, a malware analysis of the selected object; and providing, to the virtual machine, a malware analysis result for the selected object.

Abstract: Disclosed are systems and methods for prioritizing scan requests. An example method includes reserving, by a computer processor, one or more connections between a thin client and a virtual machine of a computer; when one or more of the reserved connections are not used for communicating on-access scan (OAS) requests or on-demand scan (ODS) requests, allocating said one or more reserved connections for communicating OAS or ODS requests between the thin client and the virtual machine; and when all the reserved connections are used for communicating OAS or ODS requests, and at least one reserved connection is used for communicating ODS requests, reallocating for communicating the OAS requests the at least one reserved connection used for communicating ODS request.

Abstract: Disclosed are systems and methods for ensuring fault tolerance of antivirus protection realized in a virtual environment. An example method includes collecting, by a antivirus agent in a virtual machine, information about available security virtual machines that provide at least one or more resource-intensive methods of antivirus checking of programs running on the virtual machine; analyzing the collected information to determine a location of the virtual machine relative to the security virtual machines and determine priorities for each of the security virtual machines based on the location of the virtual machine relative; forming a list of the available security virtual machines according to the priorities of the security virtual machines to identify a primary security virtual machine; connecting the virtual machine to the primary security virtual machine; and requesting the primary security virtual machine to perform at least antivirus checking of one or more programs running on the virtual machine.

Abstract: Among a plurality of virtual machines running on a host system are a set of virtual machines that provide an operating system, a lightweight agent module, and user applications to be executed. Also, a special-purpose virtual machine executes a central security module. The central security module performs security-related tasks on behalf of individual ones of the other virtual machines, and includes a malware remediation module that generates malware remediation instructions to be executed by the respective virtual machines.

Abstract: Disclosed are methods, systems and computer program products for antivirus checking of software objects in a virtual environment. An example method includes monitoring, by an antivirus agent running on a virtual machine in the virtual environment, one or more events occurring in the virtual machine; determining an object related to the one or more monitored events and a type of the object; determining whether the object needs antivirus checking; sending, to a control module in the virtual environment, information about the object that needs antivirus checking, the type of the object, and the one or more identified events; determining one or more methods of antivirus checking to be performed on the object; selecting one or more components of an antivirus system in the virtual environment; and distributing among the selected components, the antivirus checking methods to be performed on the object.