1. A method of detecting viral code in subject files, comprising: creating an artificial memory region spanning one or more components of the operating system; emulating execution of computer executable code in a subject file; and detecting when the emulated computer executable code attempts to access the artificial memory region.