1. One or more computer-readable media having computer-readable instructions therein that, when executed by a computing device, cause the computing device to perform acts comprising: receiving, at a virtual machine monitor, a request that a range of memory be made unalterable from or inaccessible from an operating-system privilege mode; making the range of memory unalterable from or inaccessible from the operating-system privilege mode; and running a protection agent that resides within the range of memory.