1. A computerized method of reverting system data effected by a malware, comprising: monitoring, in run time, a plurality of events of a plurality of processes executed by an operating system (OS) running on a computing device: logging in an event log, in run time, said plurality of events; classifying, in run time, a first process of said plurality of processes as a malware; identifying a set of events of said first process from said plurality of events using said event log; and reverting, in response to said classification, at least one system object hosted in said computing device to remove an effect of said set of events on said OS.