Patent ID: 8312547

Claim:
A system for scanning for malware in a computer having a portable environment including a portable file system located on a removable storage device, the portable environment using virtualization in a host operating system, comprising: a non-transitory computer-readable storage medium storing executable computer program modules comprising: an access module for: installing an access filter driver that links to a portable filter driver of the portable environment and observes path translations being performed by the portable filter driver; and intercepting path translations being performed by the portable filter driver to derive path translation instructions; a path translation module for translating a virtualized path of a file in the portable file system to an actual path of the file based on the intercepted path translation instructions, the virtualized path being the path in the context of a portable user application running in the portable environment, the actual path being the path in the context of the host operating system; and a malware detection module for executing directly under the host operating system and determining whether the file contains malware using the actual path of the file.