1. A method for determining whether a computer program, sent to a first computer having an operating environment including a plurality of files, includes malware, the method comprising: a second computer obtaining a plurality of environment details of the operating environment of the first computer; the second computer simulating in the second computer the presence of the plurality of files in the operating environment by exhibiting the plurality of environment details without installing the plurality of files in the second computer; the second computer executing the computer program in the second computer with the simulation; and the second computer determining whether the computer program attempts to access or utilize the plurality of files in a manner indicative of malware, and if not, the second computer performing one of recording and generating a notification that the computer program is not malware.