1. A method for analyzing a program executing within a virtual environment on a computing device, comprising: determining whether the program is attempting to detect whether the program is being executed within the virtual environment; and in response to determining that the program is attempting to detect whether the program is being executed within the virtual environment: terminating the program during execution within the virtual environment; re-executing the program in a protected mode of the computing device; and analyzing the program within the protected mode of the computing device.