1. A computer program product embodied in a computer readable medium that, when executing on one or more computers, performs the steps of: identifying an altered disk sector; associating the altered disk sector with data that are operated in a virtual machine; and causing a malicious code scan to be performed on the data.