1. At least one machine readable storage medium having instructions stored thereon to detect malware, the instructions when executed by at least one processor cause the processor to: receive an entropy rate of a potentially affected system; compare the received entropy rate to an average entropy rate; and determine a probability that the potentially affected system is infected with malware, the probability based, at least in part, on a result of the comparison.