1. A computer-implemented method for detecting malicious behavior of a computer program, comprising: emulating at least a part of a multitasking computer system in an isolated computer environment; emulating execution of the computer program in the isolated computer environment, including emulating execution of a plurality of executable components of the computer program, wherein at least two of the plurality of executable components are being emulated in parallel; monitoring events being generated by two or more of the plurality of executable components; and determining, substantially in real time, based at least on one or more events generated by each of two or more of the plurality of executable components whether or not the computer program exhibits malicious behavior.