1. For a host computer on which a set of virtual machines (VMs) execute, an encryption method comprising: detecting malware on a first VM; and encrypting data messages transmitted by at least a second VM after the malware is detected.