1. One or more non-transitory machine-readable storage mediums storing one or more sequences of instructions for updating a central repository with information about malware resident upon a computer system, which when executed by one or more processors, causes: upon detecting the malware executing in a virtual machine, a software module, without manual instruction, sending malware manifest data to a central repository over a network, wherein the malware manifest data further comprises all versions, including temporary versions, of any files written to, updated by, or accessed by said malware, wherein the malware manifest data comprises a copy of the malware and data identifying or comprising a set of files infected by the malware.