1. A computerized method of preemptive event handling, comprising: monitoring, in run time at kernel level, a plurality of events of a plurality of processes executed by an operating system (OS) running on a computing device; detecting, in run time, a first event of said plurality of events, said first event being performed by a first process of said plurality of processes on said computing device; classifying, in run time, said first process as a malware in response to said detection of said first event; and preventing, in run time, said first process from running on said computing device before said first event is processed by said OS.