1. A computer security method comprising: detecting, by one or more processors, a request to modify a write-protection attribute of a memory location within a memory of a computer, wherein the request seeks to allow the memory location to be written to, and wherein the memory location was previously subject to detected malware-related activity; and preventing, by the one or more processors, modification of the write-protected attribute of the memory location.